Function tmp_path_for 

pub fn tmp_path_for(path: &Path) -> PathBuf

Compute the temp path used by atomic_write. Splitting this out lets callers reason about the rename target shape (and unit-test the orphan-cleanup path) without going through the filesystem.