Fix: tools: detect CIB directory correctly

A regression in 2.0.0 via 55ab749b incorrectly returned an empty string for the
CIB directory when it is in the usual place. Also before that, a regression in
1.1.15 via e00d5218 always returned the usual place for the CIB directory,
regardless of whether it existed.