SHA1 the file while downloading it, kill noCheck, use io.Copy for sha1 from-disk.

Signed-off-by: Callum R. Jones <cj@icj.me>