Function classify_io_uring 

pub fn classify_io_uring(opcodes: &[u8], seccomp_mode: u32) -> bool

Classify whether an io_uring submission is suspicious.

Returns false when seccomp is disabled; returns true when seccomp is active and the opcode list contains a sensitive syscall.