Project subfolders remain allowed; paths outside the PVC are rejected.

Co-authored-by: Cursor <cursoragent@cursor.com>