pub fn sha256(bytes: &[u8]) -> [u8; 32]
One-shot SHA-256 of an in-memory byte slice. Useful when the caller has already assembled the canonical byte representation of a stage’s output.