Function evaluate 

pub fn evaluate(
    rules: &[AutoRule],
    session: &ClaudeSession,
) -> Option<RuleMatch>

Evaluate all rules against a session. Deny rules take precedence. Among non-deny rules, first match in config order wins.