pub fn normalize_workspace_scope(value: &str) -> Option<String>Expand description
Return a stable absolute workspace scope suitable for a persisted rule.
Relative paths and filesystem roots are rejected: remembered grants must name one concrete repository rather than accidentally applying everywhere.