Function security_file_change_severity 

pub fn security_file_change_severity(sensitive_count: usize) -> Severity

Core predicate for security file change severity (CC7.2). Zero sensitive files changed -> Pass, any sensitive -> Error.

Verified by Creusot in gh-verify-verif crate.