pub fn secrets_policy_sidecar_bytes(
requirements: &[SecretRequirement],
) -> Result<Option<Vec<u8>>>Expand description
Build the secrets-policy.json sidecar bytes from the canonical secret
requirements the pack declares. All entries are assigned the byo-required
policy — no publisher value ever ships. Returns None when requirements
is empty so packs with no secrets produce a byte-identical archive.