pub fn verify_password( password: Secret<String>, hash: &str, ) -> Result<bool, AppError>
Verifies a password against an Argon2 hash.