fn download_verified_asset( client: &Client, url: &str, temp_path: &Path, label: &str, expected_hash: &str, ) -> Result<()>