enforce resource handling, prevent test interference by running in a jvm-unique CWD (under build/, same as tempDir)