pub fn diff( local: &HashMap<String, String>, server: &HashMap<String, String>, ) -> ReconcilePlan
Diffs the vault’s authoritative hash set against the server’s.