Function classify_path 

pub fn classify_path(path: &Path) -> SensitivityLevel

Classify a source path. Secret-like paths (keys, .env, .ssh/…) → Secret. Everything else stays Public — path alone is not enough to infer lower confidential levels without guessing.