pub fn normalize_checksum(checksum: &str) -> String
Strip any sha256: prefix and lowercase the remaining hex for storage.
sha256: