pub fn hash_bytes(content: &[u8]) -> String
Compute SHA-256 of raw bytes.
Returns "sha256:<64-char-lowercase-hex>".
"sha256:<64-char-lowercase-hex>"