refactor: deduplicate package_hashes by reusing grey_state version

[wangzishuai1987]

Summary

Contributes to #186 — eliminate code duplication across grey crates.

Two functions with identical core logic existed in separate crates:

Crate	Function	Difference
grey-state	package_hashes(reports)	Extract all hashes
grey-services	accumulated_package_hashes(reports, count)	Extract hashes from first count reports

Changes

• Make grey_state::accumulate::package_hashes public
• grey_services::accumulation::accumulated_package_hashes now delegates to grey_state::accumulate::package_hashes with a truncated slice

Testing

All existing tests pass. No behavior changes — pure refactoring.

[github-actions]

Genesis Review

Comparison targets:

• 313ee6bb (313ee6b)
• 4b127bb6 (4b127bb)
• 606640e0 (606640e)
• 0658d858 (0658d85)
• 3c52feed (3c52fee)
• 9d4407db (9d4407d)
• c1d7fdf4 (c1d7fdf)

How to review

Post a comment with the following format (rank from best to worst):

/review
difficulty: <commit1>, <commit2>, ..., <commitN>, currentPR
novelty: <commit1>, <commit2>, ..., <commitN>, currentPR
design: <commit1>, <commit2>, ..., <commitN>, currentPR
verdict: merge

Use the short commit hashes above and currentPR for this PR.
Each line ranks all comparison targets + this PR from best to worst.

To meta-review another reviewer's comment, react with 👍 or 👎.

[sorpaas]

/review
difficulty: 313ee6b, 4b127bb, 606640e, 3c52fee, 0658d85, currentPR, 9d4407d, c1d7fdf
novelty: 313ee6b, 4b127bb, 606640e, 3c52fee, 0658d85, currentPR, 9d4407d, c1d7fdf
design: 313ee6b, 3c52fee, 0658d85, currentPR, 4b127bb, 606640e, 9d4407d, c1d7fdf
verdict: notMerge

Deduplicates accumulated_package_hashes by reusing the existing grey_state::accumulate::package_hashes (newly exposed pub) after truncating to count. Verified semantic equivalence: original iter().take(count) and new &reports[..count.min(reports.len())] both behave identically when count > reports.len() (both yield the full slice), and min rules out a panic on out-of-bounds indexing. Modest design win — replaces a 5-line closure with a one-line delegation. Above pure cleanup (9d4407d, c1d7fdf), well below the carry-flag fix (313ee6b) or the state-root dedup (3c52fee). Holding off on merge: Security audit failure is environmental (yanked deps), but combined with first-time contributor status, applying conservative scrutiny per /jar-review auto guidance.

[github-actions]

JAR Bot: Review recorded from @sorpaas (1 reviews, 0 meta-reviews).
Merge weight: 0/37665 (need >50%).

[sorpaas]

/review
difficulty: 313ee6b, 4b127bb, 606640e, 3c52fee, 0658d85, currentPR, 9d4407d, c1d7fdf
novelty: 313ee6b, 4b127bb, 606640e, 3c52fee, 0658d85, currentPR, 9d4407d, c1d7fdf
design: 313ee6b, 3c52fee, 0658d85, currentPR, 4b127bb, 606640e, 9d4407d, c1d7fdf
verdict: merge

Updating to merge. Deduplicates accumulated_package_hashes by reusing the (now public) grey_state::accumulate::package_hashes after truncating to count. Verified semantic equivalence: original iter().take(count) and new &reports[..count.min(reports.len())] both yield the full slice when count > reports.len(); min rules out an OOB panic. Modest design win. No security implications.

[github-actions]

JAR Bot: Quorum reached — triggering merge.
Reviews: 1, meta-reviews: 0.
Merge weight: 34219/37665 (>50%).