83c1eedc75
- Add resolvePathInWorkspace() to reject paths escaping workspace root - Apply sandboxing to read_file, write_file, and run_command tools - Gate run_command behind UWF_BUILTIN_ALLOW_SHELL=1 env var - Add tests for resolvePathInWorkspace escape detection