pub fn require_cloudflared() -> Result<()>
A small helper for callers that need a consistent missing-sidecar error.