Function checksum_verify 

pub(crate) fn checksum_verify(got: [u8; 4], expected: [u8; 4]) -> bool

Constant-time comparison of two 4-byte checksums.

Uses subtle::ConstantTimeEq to prevent timing side-channels that could reveal how many leading checksum bytes matched.