Firewall config drift: classification is the job

Raw config diffs drown teams in cosmetic churn. Parse firewall rules into objects, baseline against declared intent, and rank drift by reachability.