Collect hashes of local and remote resources

[mikhailswift]

Currently hashes are being collected for some resources but not all. This should be expanded to include all images, helm charts, files, etc. When resources are fetched from a remote hashes should be confirmed with the remote registry after pull. These hashes should then be verified prior to deploying a zarf package.

This likely will be a sub-task of #22

[JasonvanBrackel]

Possibly a subtask of #23

[jeff-mccoy]

Stale issue, closing.