[2026-03-30] Harden web request download resilience

Add required final hash verification for streaming downloads and tighten
resume/lock cleanup behavior.

Also restore prior security protocol flags after the request wrapper exits
and expand the function help to match the new behavior.

Author: eigenverft