Add a "-j projid" option that reads the project ID via FS_IOC_FSGETXATTR, so a single CHECKSTAT invocation can verify UID/GID/PROJID together.  "-p" is already used for permission, so "-j" (for "project") is used.