change checksum to sha256

Chef 12 validates a downloaded file's checksum using SHA-256 by default.  This swaps from md5 to sha256