Function finalize_fresh_repository_policy 

pub(crate) fn finalize_fresh_repository_policy(
    rootfs: &Dir,
    initial_config: RepositoryConfig,
) -> Result<()>

Replace only the metadata of a repository created by this install. The replacement is generated by composefs-rs itself, so format and feature settings cannot drift from the normal initialization path.