use ;
use ;
/// Generate a random 32-byte secret as 64-char lowercase hex.
/// Uses OS-provided CSPRNG for cryptographic security.
/// SHA256 of raw bytes, returned as 64-char hex.
/// Used for computing witness proof: sha256_bytes(&hex::decode(secret_hex)).
/// This matches backend witness.rs `secret_hash()` logic.