pub fn checked_sub_u64(a: u64, b: u64) -> SdkResult<u64>
Subtract two u64 values and check for underflow.