pub fn validate_file_write(path: &Path) -> Result<(), &'static str>
Validate a file path for write safety. Returns Err with reason if the write should be blocked. Inspired by claw-code’s file_ops.rs safety checks.