Function safe_project_data_dir 

pub fn safe_project_data_dir(project_root: &Path) -> Result<PathBuf, String>

Returns the project-scoped .lean-ctx/ directory if the project root is safe. Returns Err if the project root collides with the global data directory.