pub fn verify_checksum(data: &[u8], expected: &str) -> Result<(), PkgError>Expand description
Verify a byte buffer against a SHA-256 checksum.
Accepts both bare hex ("a1b2...") and the "sha256:"-prefixed form used
by the registry. Returns PkgError::ChecksumMismatch on disagreement.