- config.rs 新增 game_creator_config_path_is_runtime_managed 判定，read_game_creator_config_file 按路径归属分流：AppData 托管目录内的真实凭据维持私有加固读取，仓库旁边的回退模板与 local 覆盖改用 open_project_snapshot_regular_file 非变异快照通道
- 根因：开发 CLI 无 AppHandle 时回退读取 worktree 内 git 跟踪模板，私有读通道在 Windows 上无条件收紧 DACL 为仅当前进程用户，导致其他账号与 cargo include_str! 全部 Access Denied
- tests/mod.rs 新增 clear_test_runtime_config_dir 辅助
- tests/configuration.rs 新增两个回归测试锁定快照 / 私有两条读取通道的分流
- pitfalls.md 记录该排障经验与读取通道副作用白名单教训

@@ -3644,0 +3646,4 @@
+/// that can be git-tracked; privatizing one on read silently locks the
+/// worktree template to whichever account happened to run the dev CLI, so
+/// they must go through the non-mutating snapshot channel instead.
+pub(crate) fn game_creator_config_path_is_runtime_managed(path: &Path) -> bool {

@@ -1187,0 +1197,4 @@
+    .expect("write fallback template");
+    let _guard = clear_test_runtime_config_dir();
+
+    // 仓库旁边的回退模板是共享输入，读取绝不能走会收紧 owner/DACL 的私有通道。