pub fn classify(key: &str) -> Option<ConfigRisk>Expand description
Classifies a fully-qualified config key (dot-path, e.g. secret_detection.enabled).
Returns a ConfigRisk for keys whose change is security- or
egress-relevant; None for everything else.