Function resolve 

pub fn resolve(
    name: &str,
    upstream_base: &str,
    cache_root: &Path,
) -> Result<RepoRef>

Validate a repo path (no traversal / absolute / NUL) and resolve it against the upstream base and cache root.