Remove dependency on cargo-download

[mkroening]

cargo-download seems to be dormant. We should be able to access crates.io ourselves without much effort (rust-lang/crates.io#65 (comment)).

As this is an implementation detail of crates.io, we might think about supplying libhermit-rs' source code in a different way altogether in the long term.