Function classify_hidden_dentry 

pub fn classify_hidden_dentry(nlink: u32, filename: &str) -> bool

Classify whether a dentry is hidden or suspicious.

Returns true when nlink == 0 (unlinked file still mapped) or when the filename has a suspicious extension despite being linked.