pub(crate) fn mount_composefs_candidate( sysroot: &OwnedFd, candidate: &ComposefsCmdline<Sha512HashValue>, allow_missing_fsverity: bool, ) -> Result<Option<OwnedFd>>