More complete measurement verification

[labbott]

As noted in oxidecomputer/dice-util#387 the current method of checking measurements is incomplete. At a minimum, we will need a new version of dice-verifier in sprockets and possibly a protocol change.