## GREEN
PASS --keep defaults to 20
PASS plan: delete 4, keep 20, protect 2 (latest + the floor)
PASS the in-use 0.262.0 is not in the delete plan
PASS the plan says why 0.262.0 is kept
PASS dry-run
PASS red: without the in-use list 0.262.0 WOULD be deleted
PASS unreadable in-use list -> refused (exit 3)
rc=0
1
## RED (is_protected without the in-use check)
PASS --keep defaults to 20
FAIL plan counts:   Would delete 5 tag(s); keep 20; protect 1:
FAIL the in-use 0.262.0 is in the delete plan
FAIL no reason printed for 0.262.0
PASS dry-run
PASS red: without the in-use list 0.262.0 WOULD be deleted
PASS unreadable in-use list -> refused (exit 3)
rc=1
sed: couldn't edit /dev/null: not a regular file
## GREEN again
rc=0
