Return both managed bin locations in preference order.
Read from the module globals on each call rather than frozen into a
constant, so a test (or a future runtime override) that patches BIN_DIR
is honored by lookup, PATH assembly, and install alike.