pub fn manifest_digest(manifest_bytes: &[u8]) -> [u8; 32]
Compute the SHA-256 digest of the manifest bytes.