Function is_forwardable 

pub fn is_forwardable(key: &str) -> bool

Whether key is an agent runtime variable lean-ctx forwards to child shells.

A variable qualifies only when it (1) matches a forwardable agent prefix AND (2) is not credential-shaped — session/thread identifiers cross the bridge, secrets never do (GH security audit, finding 2).