[RFC] Let homebrew handle external resources download

@fwalch @tarruda

Close #1388
As homebrew's resources only accept sha1. So I changed all of hash check to sha1 for consistency and convenience of future updates.

If needed, we can keep this as md5.