pub fn bytes_fingerprint(bytes: &[u8]) -> String
Computes a lowercase SHA-256 fingerprint without retaining source bytes.