download package: checking existing files in repo with SHA256 before redownloading.

This is aimed at speeding up building the repository if download_package.sh is called
multiple times. Often the user will have most of the required packages already.

Signed-off-by: GusBricker <chris@lapa.com.au>