pub fn build_service(manifest_dir: &str, bin_name: &str) -> PathBuf
Build a PVM service blob (single entrypoint, size-optimized profile).