Return the first candidate directory that accepts a file.
Shared by the managed-bin and update-lock resolvers, which both walk a preferred-then-fallback pair. Callers keep their own "fell back" warning, because the consequence of falling back differs between them.
Directories to try, most preferred first.
Permission bits for directories this call creates.
Noun phrase naming the directory's purpose, used in the log.
