zstd:chunked: add fsverity digest too

[cgwalters]

Chatting with Giuseppe around supporting partial pulls with a potential external composefs-native additional layer store - this would allow us to easily do "full file partial pulls" which I think are 80% of the value.

Alternatively we could require the additional layer store to maintain the full-file sha256 (but personally I'd prefer the former).