Fetch a CID via the Cloudflare IPFS gateway and confirm content integrity (SHA-256 hash + content-type) against expectations.