computeKid static method
First 8 bytes, hex-encoded, of the SHA-256 of the public key material,
for a pub held as base64 — which is how a key package carries one.
Delegates to at_auth's publicKeyKidOfBase64 so that every record
advertising a key derives its id one way; a kid computed two ways
surfaces only as an envelope that will not verify.
Implementation
static String computeKid(String pub) => publicKeyKidOfBase64(pub);