pub fn verify_password(password: &str, hash: &str) -> Result<bool, String>
Verify a plaintext password against an Argon2id hash.