fn require_digest(value: &str) -> Result<(), CliError>
Validate a lowercase BLAKE3 hexadecimal digest.