Function canonicalize_secure_bounded 

pub fn canonicalize_secure_bounded(path: &Path, timeout_ms: u64) -> PathBuf

SECURITY variant of safe_canonicalize_bounded — bypasses the #356 TCC guard so PathJail keeps resolving symlinks to detect jail escapes. See canonicalize_secure for why a prompt here (explicit request) is legitimate.