Pinned download: SHA-256 and a verify-then-run snippet for install scripts

Free check: paste the URL of an install script or binary and get its SHA-256 plus a snippet for shell, GitHub Actions, GitLab CI or a Dockerfile that downloads, verifies and only then runs it.