pub fn sha256_digest(bytes: &[u8]) -> String
Validates publisher-owned Manifest semantics independently of Host policy. Computes the canonical digest syntax used by Plugin Release documents and files.