pub fn verify_signature(
manifest: &Manifest,
module_sha256: Option<[u8; 32]>,
) -> Result<(), String>Expand description
Verify a manifest’s ed25519 signature over signing_payload. Pass the
module’s sha256 for code-bearing plugins, None for content
plugins. Returns a user-facing error string on any failure (wrong alg,
malformed key/signature, or a verification mismatch) — never panics.