Function is_safe_candidate 

pub fn is_safe_candidate(path: &Path, scan_root: &Path) -> bool

Whether path is a directory beneath scan_root that is safe to delete.

Rejects missing paths, the scan root itself, protected system directories, and anything under [SKIPPED_PREFIXES].