pub fn sha256_file(path: &Path) -> Result<String>
Lowercase hex sha256 of a file’s contents, streamed rather than read whole.