Function config_hash 

pub fn config_hash(bytes: &[u8]) -> String

SHA-256 of bytes as lowercase hex — the exact hash registry::custom::repo_is_trusted computes over a .safe-chains.toml, so the printed pin matches what the trust check will require.