Support multiple working dirs in Executor

**Is your feature request related to a problem or challenge? Please describe what you are trying to do.**
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
(This section helps Arrow developers understand the context and *why* for this feature, in addition to the *what*)

We need to support multiple working dirs in the Executor. And if some of dirs/disks have IO error, we should avoid writing data to the bad dirs.

**Describe the solution you'd like**
A clear and concise description of what you want to happen.

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.

**Additional context**
Add any other context or screenshots about the feature request here.

The issue names the Executor but no files or tests. Start by locating the Executor implementation and its working-directory configuration, then determine how multiple directories should be selected and how IO failures should exclude a directory. Done means the Executor supports multiple working directories and avoids writing to directories with IO errors.

Written by the indexing model from the issue text.