Is the TCP checksum over the payload?
Yes, the checksum is in the TCP header. Rather than check wiki you can go to the references here: RFC 793 Specifically read section 3 paragraph 1.
When you mention cut-through I assume referring to switching. The switch isn't changing anything in the packet payload so there would be no need to recompute the checksum.