Function run_command 

pub fn run_command(
    cmd: &str,
    worktree: &Path,
    ceiling: Option<Duration>,
) -> CheckRecord

Runs one shell command in a worktree, bounded, capturing both streams.

Shared with worktree preparation, which needs exactly this and must not be reported as a gate check.