switch to sha256 checksums

* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes

Remaining md5sums either didn't download or
didn't pass checksum tests.

python-markupsafe/PKGBUILD

@@ -10,7 +10,7 @@ license=('custom')
 url="https://pypi.python.org/pypi/MarkupSafe"
 makedepends=("python2-setuptools" "python3-setuptools")
 source=("https://pypi.python.org/packages/source/M/MarkupSafe/MarkupSafe-${pkgver}.tar.gz")
-md5sums=('f5ab3deee4c37cd6a922fb81e730da6e')
+sha256sums=('a4ec1aff59b95a14b45eb2e23761a0179e98319da5a7eb76b56ea8cdc7b871c3')
 
 build() {
   cd "$srcdir"