Function sha256_hex 

pub fn sha256_hex(bytes: &[u8]) -> String

Hex-encode the SHA-256 digest of bytes. Pure, synchronous, no allocation beyond the 64-char output String. Mirrors the TS sha256Hex byte semantics: the caller is responsible for encoding a string input to UTF-8 bytes before calling (the napi boundary does this).