First-access scaffolding: creates userdata directories and default files. Idempotent - the atomic flag skips the walk after the first pass.