pub fn hash_api_key(api_key: &str) -> String
SHA-256 lookup hash for an API key.
API keys are high-entropy secrets, so a fast cryptographic lookup hash is appropriate; this is not a password hash.