thunderbird-bin: update script to uses sha1 from mozilla

With this patch, auto-generated hashes are stored in a separate file. We can safely edit default.nix.
Now we use sha1 hashes provided by Mozilla, so that downloading sources is no longer required to update the Nix expression.

Reopening #4540 with rebased branch and more appropriate commit message.