pub fn sha256_file(path: &Path) -> Result<String>
SHA-256 of a regular file (lowercase hex). Callers that accept untrusted paths must reject symlinks with symlink_metadata first.
symlink_metadata