but i wanted to confirm with someone - my easiest options for online verifying checksums would be to trigger pg_basebackup then check pg_stat_database, or to install michael's utility?
Your easiest option is to just use pgbackrest, which verifies checksums as part of its process. So you are guaranteed to have every page verified at least as often as every full backup.