pub fn cap_name(bit: u64) -> &'static str
Map a single capability bit to its human-readable name.
Returns "UNKNOWN" for unrecognized bits.
"UNKNOWN"