Function canonicalize 

pub fn canonicalize(path: &Path) -> PathBuf

Best-effort canonicalization. Returns path verbatim on failure so the caller doesn’t have to unwrap. Used to defang /tmp ↔ /private/tmp drift on macOS before prefix matching.