Module owner_only 

Owner-only directory lockdown: the Unix chmod 0700 equivalent on both platforms. Single home for the DACL/chmod logic so the two callers (ghidra-mcp::logging for the log dir, ghidra-worker-ctl::boot for the per-boot token dir) cannot drift apart.

Functions

restrict_to_owner

Restrict path (a directory) to the current user. On Unix this is a real 0700; on Windows it replaces the DACL with a single owner-only ACE and marks it protected so no inherited Everyone/BUILTIN\Users grant survives. Mirrors chmod 0700.