pub fn checked_div(a: u64, b: u64) -> Result<u64, ProgramError>
Checked division (returns error on divide by zero).