pub fn spawn_isolation_dir() -> Result<PathBuf, AppError>
GAP-SPAWN-001 (v1.0.91): isolation directory for LLM subprocesses. Prevents .mcp.json walk-up by anchoring CWD in a clean temp dir.