nix-prefetch-* and fetch* improvements

* nix-prefetch-hg:
  - disable SSL cert checking via --insecure flag
* nix-prefetch-git:
  - disable SSL cert checking via GIT_SSL_NO_VERIFY=true
  - print hash in base32 by default