pub fn sha256_of_file(path: &Path) -> Result<String>
Compute the lowercase-hex SHA-256 of a file, reading in chunks so large artifacts don’t need to fit in memory.