If we would like an unspendable internal xpub to be standardized between descriptors and wallet policies, then we must remove duplicates. I think sorting and removing duplicates of all xpubs, then concatenating and SHA256 hashing the result would be the simplest to implement.
We would also have to restrict all xpubs to xpub/<0;1>/*
with no allowance for optional derivation paths. I think that’s ok because that allowance is for legacy wallets, who would not have taproot support anyways.