pub fn ensure_clean(repo: &Path, rel_crate: &str) -> Result<()>
The crate directory must have no uncommitted changes before we start, so the index checkpoint begins at a known-clean baseline and a revert is safe.