A per-request file descriptor. A producer may supply the SHA-1 it already calculated while publishing the file; routes without one derive it from the same pinned file channel used for the response body.