pub fn user_shadow_git_dir(workspace: &Path) -> Result<PathBuf>
<user_workspace_dir>/shadow-git/ (parent only — caller is responsible for git init --bare).
<user_workspace_dir>/shadow-git/
git init --bare