Function pod_security_context_is_elevated 

pub fn pod_security_context_is_elevated(psc: &PodSecurityContext) -> bool

Whether a pod PodSecurityContext requests root. Pod-level only carries a subset of the container knobs — runAsUser / runAsNonRoot are the ones that can make the mover root (capabilities/privileged are container-only). fsGroup and friends are NOT elevation. Pure helper for requires_privilege_resolved.