pub fn mark_complete(dir: &Path, version: &str) -> Result<()>
Mark dir complete (write-then-rename, so a reader never sees a torn marker). Call under the install lock, after verifying the shim.
dir