pub(crate) fn sha256_file(path: &Path) -> String
A file’s sha256, lowercase hex; empty when it cannot be read.