[Re]Enforce manifest/layer digest verification Upstream-commit: e84a938f2ee700886fa05f9f4970ac0e9b8f6231 Component: engine