pub fn content_hash(bytes: &[u8]) -> String
sha256 hex digest of the given bytes — used for document dedup.