pub fn is_protected_dotfile(path: &Path) -> bool
Check if a path is a protected dotfile using the global guardian.
Returns false if the guardian hasn’t been initialized.