Function manifest_candidate 

pub fn manifest_candidate(
    root: &Path,
    name: &str,
) -> Result<(Candidate, Vec<(String, String)>), QorError>

Read manifest entry name under root and its files, refusing any file whose bytes no longer hash to the recorded SHA3-256.