pub fn derived_version(sha256: &str) -> String
sha- + the first 8 hex chars of the sha256: the same on every rebuild and replica, and different for every payload, unlike the old fixed 0.0.0.
sha-
0.0.0