Function process_scan_file 

pub fn process_scan_file(
    input_path: &Path,
    config_mgr: &mut ConfigManager,
    opts: &ProcessOptions,
) -> Result<ProcessResult>

Shared pipeline: parse -> normalize -> dedup -> NVD enrich -> suggest. Used by both the standalone process command and ingest --process so the two never drift apart.