Function verify_bundle_objects 

pub fn verify_bundle_objects<P: AsRef<Path>>(
    bundle_path: P,
) -> Result<Vec<String>>

Bundle analog of verify_packed_objects: verify a .sttb’s contents against its embedded manifest with no trusted side-channel — each content-addressed object’s bytes must blake3-hash to its key, in-bundle lengths must match the manifest-declared lengths, the directory must decode (paged structure included), and no pack_id may fall outside the pack table.

Returns the list of violations (empty ⇒ clean). Returns Err only when the bundle container itself cannot be read or parsed (mirroring the manifest-unreadable case of the exploded verifier).