New events’ chain envelope covers a documents digest

For new events the chain envelope gains documentsDigest (a digest over the event’s ordered documents) in a new envelope schema version, so documents become tamper-evident through the chain; old events verify under the old version.