pub fn shadow_policy_digest(value: &Value) -> String
Compute the canonical digest used for a policy JSON value.