pub fn validate(path: &Path) -> Result<Manifest>
Verify manifest and all declared hashes, without executing the package.