vanta-shim — the per-tool dispatcher (see docs/10-environments.md).
Installed under each tool's name in ~/.vanta/bin. When invoked it finds the
tool that its argv[0] names in the active generation, locates the real
binary in the store, and execs it. (Per-directory switching via a
resolution cache is a later refinement; this cut dispatches from the active
generation.)