Bash equivalent of the PowerShell manifest module: sync_managed_destination plus its read/write/hash helpers, using sha256sum and a TSV manifest so the same idempotent-install, stale-detection, and local-modification protection behavior is available without a PowerShell dependency. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>