pub fn validate_path(project_root: &Path, file_path: &str) -> AppResult<PathBuf>
Validates that an existing path is inside the project root and returns its canonical form.