Function write_okf_bundle 

pub fn write_okf_bundle(dir: &Path, bundle: &OkfBundle) -> Result<(), String>

Writes a bundle to dir, creating category subdirectories as needed.

dir is the trusted export root. Below it every component — category directory and file — is checked per component and must not be a symlink, so a pre-existing bundle with a planted link cannot redirect the export.