real s&box backend discovery, and the installed CLI command via subprocess. All filesystem tests use tmp_path for isolation. Artifact paths are printed for manual inspection. """Resolve installed CLI ...