pub fn mark_setup_done() -> Result<()>
Mark first-time setup complete (write the sentinel). Best-effort.