pub fn state_file_lock_path(state_path: &Path) -> Result<PathBuf>
Canonical sibling lock filename for a KeyHog state artifact.