Restrict code excerpt sources

[novemberborn]

• Don't show a code excerpt if the source doesn't exist on disk
• Don't show a code excerpt if the source exists outside the project directory
• Don't show a code excerpt if the source is within a node_modules directory (within the project directory)

This is a follow-up issue from #1231.