pub const PRIVATE_DIR: &str = "private";
Broker-private state (pending table, per-request repos). No agent grant may reach it.