main/apk-tools: provide sha256 checksum for apk-static

Fedora 41 can't verify sha1 hashes anymore, likely for security reasons. Alongside the sha1 (let's keep it for backwards compatibility) let's provide a sha256 hash as well

This was cherry-picked from edge so that we can use this in the latest pmOS stable version