pinkerton,util/release: Calculate and check image tarsums

Closes #612
We should save the tar to a temporary file and verify the tarsum before actually unpacking. That way our pre-verify scope is limited to the tarsum code (which is still not a small enough scope, but it's the best we can do currently).