os.WriteFile mode is masked by umask (022 in CI turns 0666 into 0644), making the writable-file rejection test environment-dependent; chmod the explicit bits after write
os.WriteFile mode is masked by umask (022 in CI turns 0666 into 0644), making the writable-file rejection test environment-dependent; chmod the explicit bits after write