Check both resolved and unresolved path parts so a symlinked named profile (e.g. profiles/dev -> /mnt/data/dev) is still detected. Also use _ensure_cron_dir for output_dir in ensure_dirs() for consistency. Simplify-code Phase 2 finding (medium severity).