pub fn control_description(id: &str) -> &'static str
Returns the SARIF-friendly description for a built-in control ID. Falls back to “Custom control” for unknown IDs.