pub fn store_root(build_root: &Path) -> PathBuf
<build>/../store — the vault lives beside the shared build dir, so cargo clean can never touch it.
<build>/../store
cargo clean