Add "unpack-file" helper that unpacks a sha1 blob into a tmpfile.