Resharding coordinator service should not transition to committing if donor documents to clone does not match recipients document cloned. This makes the operation safer. In general, IMO we should have more invariants like these throughout the resharding operation so that something going wrong just pre-emptively kills the operation rather than leave the user in an incorrect state.