Add a hash package.

This is for juju backups.
That's mostly true.  There is exactly 1 spot where I need it (TestHashingWriterWriteFileError).  However, using Buffer everywhere else does simplify things.