Function resolve_path 

pub(super) fn resolve_path(
    work_dir: &Path,
    relative: &str,
) -> Result<PathBuf, String>

Resolve a relative path against work_dir, rejecting traversal attempts.

• Absolute paths are rejected.
• .. components that would escape work_dir are rejected.