pub fn run(graph: &Graph, lock: Option<&Lock>, config: &Config) -> Vec<Finding>
Evaluate all v0.8 rules and apply config. Staleness rules run only with a lockfile; structural rules always run.