pub fn grant_public_key(secret_key: &[u8; 32]) -> [u8; 32]Expand description
Derive the Ed25519 public key for a grant signing key, so callers can
anchor SignedGrantPolicy::verify_against to the key they resolved
without taking their own dependency on the signature crate.