Address a few CI failures in three commits:
- The NetBSD SDK release candidate was removed, so the CI consistently fails. Fix it by bumping to a release.
- Also, include SDK download hashes to catch stuff like rare bit flips due to cosmic rays.
- The riscv32 config consistently fails with download errors as well. Temporarily remove it until issue #35853 is fixed.