Function scan 

pub fn scan(
    root: &Path,
    config: &Config,
    today: NaiveDate,
) -> Result<ScanResult>

Core scanner: walks root, respects config, and returns all found fuses.

today is injected rather than derived internally so that tests can use a fixed date without depending on the current wall-clock time.