security: harden filesystem path operations against path traversal#23044

pelikhan merged 4 commits intomaingithub/gh-aw:mainfrom

copilot/harden-filesystem-path-validationgithub/gh-aw:copilot/harden-filesystem-path-validationCopy head branch name to clipboard