Function run_once 

pub fn run_once(project: &Path, wt_root: &Path) -> FullTier

Runs the full checks of project (in the worktree wt_root), confined like every other command.