pub fn validate_no_local_paths(file: &Path, content: &str) -> Vec<Issue>
Check for machine-local paths that should not appear in shared rules.