Only delete un-referenced checksums

When updating a cookbook version, only checksums that are no longer
associated with any cookbook version (not just the one being updated)
should be deleted from S3.