Make CRC checking opt-in

[charliermarsh]

We need to iron out a few bugs here (#12677). See: #12618.

[konstin]

Can we check whether data descriptors are used and if so, skip CRC validation until the async-zip library supports data descriptors? The field already exists in rs-async-zip: astral-sh/rs-async-zip@main...konstin:rs-async-zip:konsti/data-descriptor

[charliermarsh]

Yeah that sounds like it might be a better approach.