Function cli_read_is_refused 

pub fn cli_read_is_refused(raw: &str) -> bool

Whether lean-ctx read <raw> from this process would be refused (#1903). Shell-hook rewriters keep such reads on the native command instead of turning a working cat into an access-denied error.