Add a hash package.

This is for juju backups.
Perhaps Base64Sum might be a better name here, more accurately
reflecting what it does (it calls Sum) and what it returns.

Similarly RawHash below isn't a great name (the raw hash is really
the naked bytes, as your variable naming indicates); I'd suggest HexSum
instead.