Function validate_working_directory 

pub fn validate_working_directory(
    checkpoint: &PipelineCheckpoint,
    workspace: &dyn Workspace,
) -> ValidationResult

Validate that the working directory matches the checkpoint.

Uses the workspace root for current working directory comparison. Rejects legacy checkpoints that have no working directory.