[review] provide hash_sha256_check()

Uses buf_compare_ct() instead of memcmp()

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>