safer tbb update instructions

the previous instructions were problematic if you already had old
versions of sha256sums-unsigned-build.txt; infact, wget will download
the new file in sha256sums-unsigned-build.txt.1, which is not what we
want.