compare repos, blind to file structure

with filenames as keys, report files that are the same (by sha) in the
two repos