pub fn validate_config_path(path: &Path, base_dir: &Path) -> Result<PathBuf>
Validate and canonicalize a path to ensure it’s within allowed boundaries Handles both existing and non-existing paths for security validation