[PLAT-15791] Don't download sha1 during release create

Summary:
we expect a sha256 value, not a sha1. <release_url>.sha has only ever been a sha256 value,
so we cannot use it.

Test Plan: created a release and then a universe with the release

Reviewers: muthu, anijhawan

Reviewed By: muthu

Subscribers: svc_phabricator, yugaware

Differential Revision: https://phorge.dev.yugabyte.com/D39263

managed/src/main/java/com/yugabyte/yw/common/ReleasesUtils.java

@@ -36,7 +36,6 @@
 import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
-import java.util.Scanner;
 import java.util.UUID;
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;
@@ -142,15 +141,8 @@ public ExtractedMetadata metadataFromPath(Path releaseFilePath) {
 
   public ExtractedMetadata versionMetadataFromURL(URL url) {
     // Best effort to get sha256 from url
+    // The current url is sha1, not sha256. When we get a .sha256 file, we can use that.
     String sha256 = null;
-    try {
-      URL shaUrl = new URL(url.toString() + ".sha");
-      Scanner sc = new Scanner(shaUrl.openStream());
-      sha256 = sc.hasNext() ? sc.next() : null;
-      log.debug("found sha256 {} from url {}", sha256, shaUrl.toString());
-    } catch (Exception e) {
-      log.warn("failed to open sha url ", e);
-    }
     ExtractedMetadata em = new ExtractedMetadata();
     try {
       if (isHelmChart(url.getFile())) {