pinkerton,util/release: Calculate and check image tarsums

Closes #612