pub fn emit_bash_read_env(file_path: &str) -> String
Emits bash code to read a .env file safely (without sourcing).