pub fn security_categories() -> Vec<SecurityCategory>Expand description
Every security candidate category an agent can name in
security.categories.include / exclude, deduped by id and sorted.
This is the canonical, machine-readable vocabulary for the security
config surface: the embedded catalogue’s distinct sink categories plus the
standalone hardcoded-secret detector. Because the catalogue is
include_str!-embedded, the set is deterministic per build.