Function cmd_diff 

pub async fn cmd_diff(name: &str, namespace: &str) -> Result<()>

pgroles candidate diff — the SQL approving this candidate’s plan would run.