pub fn verify_file(path: &Path, algo: &str, expected: &str) -> VtaResult<()>
Verify a file against an expected checksum, fail-closed. Unknown algorithms are rejected (never silently passed). VTA-VRF-0001 on mismatch.
VTA-VRF-0001