Function ensure_state_dir 

pub fn ensure_state_dir(dir: impl AsRef<Path>) -> Result<OwnedFd, CoreError>

Create dir if needed, then verify it is a real directory with no symlink component and that it is owned by the current effective uid. Returning the anchored fd lets callers refuse to operate inside an attacker-pre-created or attacker-redirected state directory.