Return the fixed managed-config path for the current operating system.
For display and error messages. Anything that decides whether policy is
enforceable wants resolve_managed_path.
Override the detected platform; intended for tests.
Test-only injection point for the Windows branch. See
resolve_managed_path.
