pub fn default_registry_path() -> Result<PathBuf>
Returns the platform-local registry used to track safety holds.
Returns an error when the operating system data directory is unavailable.