Factor out verify_files.h, privatize VerifyFilesPromise