pub fn config_path(root: &Path) -> PathBuf
Config stays in the repo (read-only is fine): it is repository intent, not SCC state.