pub fn sha256_hex(data: &[u8]) -> String
Compute SHA-256 of the given bytes, returning the hash as lowercase hex.