null when nothing says: the deployed bytes match no release, or the
release they match predates the manifest. Both mean the same thing to a
caller — the build carries whatever constant it was cut with.
The release the deployed bytes hash to, or null when none matched.
What the running program compiled in as its
ADMIN_AUTHORITY.The constant is
Pubkey::from_str_const(env!(…)), so no account on chain names it and it cannot be read the way an upgrade authority can. The release whose.sohashes to the deployed bytes is the record of what went in, and its manifest is where the build wrote it down.