Function run_checks 

pub fn run_checks(ctx: &CheckCtx<'_>, checks: &[Box<dyn Check>]) -> Vec<Finding>

Run checks, honouring per-check severity settings:

• severity = "off" removes the check from the run set — it never executes (no wasted sampling, no discarded findings).
• Any other override replaces the severity of the check’s violations. Diagnostics — the requirement skip-notes emitted by the runner (via Check::readiness) and any a check marks with Finding::as_diagnostic — are exempt, so declaring severity = "error" never turns a “roles unresolved” note into a false failure.