Add sha256 hashes of tar.gz packages for old pip.

You may get the .tar.gz archive of packages like Django
if you have an old pip that doesn't prefer the new
Wheel format. This should cover both.