Compose the standard run directory under <root>/runs/<run-id>.
Takes a validated RunId so this run-level path constructor cannot be
handed a .. or absolute component — closing the same traversal vector the
per-run RunPaths helpers close for node/discussion/spinoff ids.