Distinguish between checking SHA-1 & SHA-256 sums

A couple casks use SHA-256 checksums. Add language to describe how to
determine those checksums in an easy way.

Builds on PR #2278. I saw some issues regarding hashes and realized that
SHA-256 checksums happen occasionally; it totally slipped my mind when
I reviewed #2278.