Function temp_output

pub(crate) fn temp_output(out: &Path) -> TempFile

Hidden sibling of out (same folder, same extension so ffmpeg still picks the muxer by name) that ffmpeg writes into; it is renamed over out only on success, so a cancel or failure never truncates or deletes an existing destination — or the source, when cutting in place.