Use the rubygems.org API to get the sha256 hashes

[cstrahan]

The version endpoint includes the corresponding sha256 hash (base16 encoded). We ought to use that, instead of using nix-prefetch-url.

If you'll asign this to me, I'll try to get to it when I have time.