build: allow skipping of the hash check in the download step

This is useful when trying to bisect an issue in a dependency, and we
want to pull from a specific commit but don't want to have to download
and determine the sha1sum and md5sum of the tarball.
Fix outdated msgpack-rpc doc.

Needed after neovim/python-client#58.
Avoid printing an error response when detecting xclip.

While we're at, using the slightly more portable `command -v` technique
to detect the executable.  Also, there's no need to use `io.popen()` if
we aren't going to record the path.  Instead, let's use the simpler
`os.execute()` to detect the presence of xclip.
Merge pull request #1554 from jszakmeister/allow-skipping-of-sum

build: allow skipping of the hash check in the download step
Merge pull request #1556 from elmart/fix-msgpack-rpc-docs

Fix outdated msgpack-rpc doc.
Merge pull request #1555 from jszakmeister/silent-xclip-find-executable

Avoid printing an error response when detecting xclip.