The capabilities probe aborts the SDK query without waiting for the child
to exit, and on Windows a directory that is still some process's cwd cannot
be removed, so the scoped temp directory's rmdir hit EBUSY. Give the fake
CLI's workspace its own directory whose removal retries until the child has
gone.

Co-Authored-By: Claude Code <noreply@anthropic.com>