document 'osxcross-man' verify downloaded archive tarballs (gcc, llvm, ...) with sha256sum or similar