Switch to codeload as well for easier package bumping.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Sergey Urushkin <urusha.v1.0@gmail.com>