Function safe_join 

pub fn safe_join(
    root: &Path,
    user_path: &str,
) -> Result<PathBuf, PathSecurityError>

Safely join a user-provided path to a root directory Validates that the result stays within the root