change results.checksums so key is pathname and val is chksum

different files may have identical checksums; if checksum is
object key then metahash will be incorrect.

+comment edits
make metahash() always return string, '' for no hash
minor, comments
wip