pub fn hash_file_sha256(path: &Path) -> Option<String>
Hex-encoded SHA-256 of file bytes, or None if unreadable.
None