Add checksum to S3 Anchor and change clone template as file-constant

[JasMehta08]

This Pull request:

(Is a part of the GSoC 2026 project S3 Backend for RNTuple.)

Adds checksum and a configurable clone path to the S3 Anchor.

Changes or fixes:

• Add an XXH3 64-bit checksum to the S3 anchor, computed over a canonical compact JSON representation of all data fields. Verified on read.
• Replace the hardcoded clone path in CloneAsHidden with a file-local constant (kDefaultCloneTemplate).

Checklist:

• tested changes locally

[JasMehta08]

@silverweed and @jblomer

I have removed the clone template from the anchor, and made it a file-constant, please have a new review of the commits

[github-actions]

Test Results

    22 files      22 suites   3d 6h 0m 14s ⏱️
 3 874 tests  3 874 ✅ 0 💤 0 ❌
71 571 runs  71 571 ✅ 0 💤 0 ❌

Results for commit 06b9980.

♻️ This comment has been updated with latest results.

[JasMehta08]

@silverweed ,

I have updated the implementation, and removed CanonicalPayload() from both ToJSoN() as well as CreateFromJSoN(). I removed the duplicate work that was being done by it. ToJSoN() using the anchor itself to create and checksum, and attaches it at the end. In CreateFromJSoN() it strips the checksum of the anchor, then using the remaining anchor to create a new hash and check against the checksum.

[silverweed]

Thanks! When @jblomer approves we can merge