Function classify_cert 

pub fn classify_cert(_der_bytes: &[u8], meta: &CertMetadata) -> String

Classify a certificate into one of the Confium “artifact types” based on the Extended Key Usage extension (if present). CNML certificates, code-signing certs, document-signing certs, TLS server certs, etc. each get a distinct type label.