pub fn config_dir_hash(config_dir: &Path) -> StringExpand description
Stable hex digest of config_dir that keys forge’s machine-local
per-config-dir files (the single-instance lock, the state cache).
Canonicalised first (best-effort) so symlinked / trailing-slash
variants map to one digest.