Function validate_path 

pub fn validate_path(path: &Path, root: &Path) -> bool

Check that path resolves within root (prevents directory traversal).