Function validate_dir_path 

pub fn validate_dir_path(path: &Path) -> Result<PathBuf>

Sanitize a directory path used for reading (e.g., chunks_dir, contexts_dir).

Traversal check → canonicalize → allowlist. Must be a directory.