pub fn cache_path_hex(fp: &[u8; 32]) -> PathBuf
Hex form of full32-byte fingerprint (collision-safe filename).