Add a hash package.

This is for juju backups.
Is this actually worth having, when we can just do: hash.NewHashingWriter(w, sha1.New),
which seems almost as easy to use, and perhaps slightly more obvious to read?

Then we can avoid this package depending on specific hash algorithms.