fn validate_aboot_composefs_candidates( id: &Sha512HashValue, boot_ids: &ExpectedBootImageIds, cmdline: &str, allow_missing_fsverity: bool, ) -> Result<()>