Correct tarsum finish logic

Tarsum now correctly closes the internal TarWriter which appends
a block of 1024 zeros to the end of the returned archive.

Signed-off-by: Josh Hawn <josh.hawn@docker.com>
Merge pull request #8063 from jlhawn/tarsum_empty_tar_archive

tarsum: correct close and finish reads