pub fn sha256_hex(data: &[u8]) -> String
Compute the SHA-256 hash of a byte slice and return it as a lowercase hex string (the APQ hash format).