pub fn ensure(dir: &Path) -> PathBuf
Create the starter home if it doesn’t exist yet; returns the manifest path. Never overwrites — the home is the user’s, we only seed it once.