pub fn safe_read_to_string(path: &str) -> Result<(PathBuf, String)>
Validate path and read file contents in one atomic step. Prevents path traversal by combining validation with the read operation.