Add sha256sum verification of vbox.dmg so that we fail sooner if our version numbers are off