fs-verity: add FS_IOC_READ_VERITY_METADATA ioctl