Function resolve_command_in 

pub fn resolve_command_in(path_var: &OsStr, command: &str) -> Result<PathBuf>

resolve_command against an explicit PATH value instead of the ambient env. The runtime resolves MCP commands against augmented_path_var for BOTH the B0 admission checks and the actual spawn, so the file that gets hashed is provably the file that gets exec’d.