fn is_scan_local(expr: &Expr, schema: &SchemaRef) -> bool
Returns true if the expression can be safely evaluated by a remote scan. Rejects outer references and column references unknown to the schema.