Safe auto-fix: removes only confidence: certain, auto_fixable unused symbols and unused imports (never files, never lower-confidence findings). Dry-run by default at the CLI; this module computes a plan and can apply it.
confidence: certain
auto_fixable