Use explicit checksum definition default

Using sha256 seems a good default. With the old "front" the
default depended on the ordering in libkleopatrarc and was
md5sum.