pub fn plaintext_allowed() -> bool
True if plaintext opt-out is active (CLI flag only — G-ERR-13, no env store).