Error generating manifest store report with sidecar manifest

[vancejc-mt]

When requesting a manifest store report the SDK always verifies; when only sending in a sidecar manifest, though, this doesn't really make sense (as there's no asset to verify with). For sidecars which have box hashes this fails with an error (box hashing not supported), as he attempts to verify but without the original asset isn't correctly able to select the asset handler (which would actually support box hashing).

We believe the manifest store report should selectively not verify if the asset is a sidecar manifest. Currently ManifestStoreReport::from_file() doesn't allow for disabling verification.

[llangsner]

as designed