pub fn verify(spec: &ModelSpec, path: &Path) -> Result<bool>
Verify a file matches the spec’s pinned checksum.