Implement trustless and verified HTTP retrieval

[lidel]

This is a placeholder issue to support trustless and verified HTTP retrieval of new Kubo (ipfs cmd) versions.

It was already implemented in ipfs/kubo#10324, remaining work is to backport that work to this repo,
so the standalone ipfs-update binary does the same.

cc #154