Update iStat Menus

  * use explicit version and SHA256
  * use HTTPS to download, from AWS