compute_digest(
db) ->digest
Compute the canonical SHA-256 digest of a package
Computes a deterministic SHA-256 hash over all package content in a
MNEME database. The digest covers manifest fields in fixed order,
module sources sorted by name, and CLI script sources sorted by name.
The signature and pubkey fields are excluded from the digest.
Used for both signing and verification.