Function download_verified 

pub fn download_verified(
    url: &str,
    dest: &Path,
    expected_sha256: &str,
) -> Result<()>

Downloads url to a temporary file, verifies its SHA-256 checksum, then moves it to dest.

Errors

Returns an error if the download, checksum verification, or move fails.