validation: Use T_report_hash_sha256_update()
Add the direct BSP character ouput to the report hash.
Update #3716.