Function scan_path_refs_with 

pub fn scan_path_refs_with(
    path: &Path,
    profile: Option<&str>,
    inputs: &RunInputs,
) -> CliResult<BTreeSet<SecretRef>>

scan_path_refs with caller-supplied crate::config::RunInputs (#444).

The pre-scan is a structural load, so it must bind ${param.*} the same way the caller’s real load will. Without this a bare faucet validate on a config declaring a required param failed here — in strict mode — before the caller’s placeholder binding ever ran.