pub fn hash_password(password: &str) -> Result<String>
Hash a password using Argon2id with OWASP-minimum parameters.