Function keychain_access_disabled 

pub fn keychain_access_disabled() -> bool

Check if keychain access is disabled via environment variables

Returns true when GESTURA_DISABLE_KEYCHAIN=1 or GESTURA_NO_KEYCHAIN=1 is set.

Outside unit-test builds, CI also disables keychain access to avoid non-interactive runner hangs. Unit tests intentionally ignore bare CI because test builds already use in-memory mock secure storage.