Change heroku.rb to use sha256sum.  Heroku.rb itself may has a problem like #829 discussion, though.