Function normalize_path_for_sandbox 

pub fn normalize_path_for_sandbox(path: &str) -> String

Normalize a path for sandbox use.

• Expands ~ to home directory
• Resolves to canonical path if possible
• Returns the normalized path string