pub fn save(accounts: &Accounts, path: &Path) -> Result<(), StoreError>
Save credentials atomically, preserving private permissions and validating all rows. The caller must hold the existing data-directory writer lock.