pub fn checkpoint_sha256(bytes: &[u8]) -> String
SHA-256 helper used by capture and focused format tests.