pub fn fingerprint(key_string: &str) -> String
Compute a SHA-256 fingerprint of an SSH public key string.
Returns a string like SHA256:abc123... (base64, no padding).
SHA256:abc123...