Update docs for sha256 and upstream linking

* Updated references from sha1 to sha256 per updates to main homebrew-cask repo
* Changed example to a font cask that shows sha256
* Added a slightly longer note about licenses based on my personal experience
* Added a note about linking as far upstream in the distribution chain as possible
* Removed section marked out of date