mkdirSync private directories

Always create permission-sensitive directories with mkdirSync(path, { recursive: true, mode: 0o700 }) from node:fs. A plain recursive mkdir looks sufficient, but can inherit permissions that expose private local state to other users.