pub(crate) fn memfd_with(data: &[u8]) -> Result<OwnedFd, String>
Anonymous CLOEXEC memfd holding data (keymap uploads, shm-style payloads).
data