pub fn fingerprint_pubkey(pubkey: &PublicKey) -> String
Fingerprint of a public key (hex-encoded SHA-256[0..8]).
Used to verify invite token signatures without a pre-existing trust anchor.