fn audit_hash(input: &str) -> StringExpand description
A short hex hash of a message, so the audit log can tell messages apart
without storing their text. DefaultHasher, not SHA-256: privacy, not
security (it was named sha256_hex until the §5.3 #7 cleanup).