pub fn canonicalize_bytes(raw: &[u8]) -> Result<Vec<u8>, JcsError>
Parse UTF-8 JSON bytes with I-JSON / RFC 8785 constraints, then canonicalize.