use github api call to get tarball instead of zip from stable branch

avoids dep on 'unzip', which is not in cloud images