> replace whole-file hashes

BLAKE3 has a whole mechanism for this, and as an added bonus it'd be substantially faster.