pub fn ensure_socket_dir() -> Result<PathBuf>
Ensure the socket directory exists with proper permissions
On Unix, creates the directory with mode 0700 for security