Fixes #1920 This also switches from Homebrew-installed `sha2` to macOS-preinstalled `shasum`.
Besides the immediate performance improvement, reducing the frequency of downloads should make spurious failures (network, rate-limiting...) less bothersome.