v1.18.44: Worktree directory boundaries

• Reject .claude/worktrees symlinks before creating an isolated worktree.
• Verify the worktree base remains inside the repository .claude directory.
• Update .gitignore through the atomic writer instead of a direct append.