Geo: Actively try to correct verification failures on the secondary

Right now if we detect a checksum mismatch between the primary and secondary, we don't do anything about it.

If we detect ref or object verification issues on the secondary, we ought to attempt to resync.