fn sha256_hex(content: &str) -> String
Compute SHA-256 hash of content, returning hex-encoded string.