Move private runtime state outside checkouts and isolate worktrees

tests/test_user_credentials.py

@@ -13,7 +13,7 @@ import pytest
 
 SCRIPT = Path(__file__).resolve().parents[1] / "resources/scripts/napseer_mcp_server.py"
 sys.path.insert(0, str(SCRIPT.parent))
-from napseer_credentials import CredentialStore, atomic_json, read_json
+from napseer_credentials import CredentialStore, CredentialError, atomic_json, read_json
 
 
 @pytest.fixture
@@ -204,7 +204,8 @@ def test_legacy_migration_preserves_authority_and_general_selection_is_explicit(
     store=seed(tmp_path,url)
     legacy={"base_url":url,"token":"legacy-project","account_mode":"operator_project","project_id":"test-project"}
     atomic_json(store.legacy,legacy)
-    assert store.selected()[1]=="legacy_project"
+    with pytest.raises(CredentialError, match="needs migration"):
+        store.selected()
     store.migrate()
     assert not store.legacy.exists()
     assert store.read()["token"]=="legacy-project"