pub fn run_scan_changed( config_path: &Path, target_paths: &[PathBuf], base_ref: &str, ) -> Result<ScanResult, ScanError>
Run a scan filtered to only files/lines changed relative to a base branch.