pub fn set_safe_mode_marker(data_root: &Path, enabled: bool)
Records whether the next launch skips widgets. Failures only lose the one-time request.