Function scan_transcript 

pub fn scan_transcript(
    log_path: &Path,
    worktree: &Path,
    ticket_id: &str,
) -> DenialSummary

Scan log_path for permission-denial events and return a summary.

Returns an empty summary (zero denials) if the file is missing or unreadable.