pub const SIGNING_DOMAIN: &[u8] = b"weftos.workload-manifest.v1\n";
Domain-separation prefix for signatures over the envelope statement.