pub fn system_candidates() -> Vec<PathBuf>
Return the candidate paths for the system layer in priority order (first match wins). Uses real env vars; for tests, see system_candidates_with_env.
system_candidates_with_env