Function content_sha256 

pub fn content_sha256(bytes: &[u8]) -> String

SHA-256 hex for content a signed manifest names. Exposed for the thin dbmd serve adapter; cryptographic verification remains centralized here.