fn dependency_closure_limit( root: &Path, sample: impl IntoIterator<Item = String>, observed: usize, ) -> CliError
Construct deterministic full-refresh guidance for an oversized dependency closure.