Function restore 

pub async fn restore(
    shadow_repo: &Path,
    working_dir: &Path,
    commit_hash: &str,
) -> Result<(), String>

Restore the working directory to the state at commit_hash. Validates the hash is a hex string to avoid argument injection.