pub(crate) fn require_space(path: &Path, additional_bytes: u64) -> Result<()>
Refuse before large writes; reserve space for filesystem and transfer overhead.