Function validate_path_under_root 

pub fn validate_path_under_root(
    path: &str,
    path_type: &str,
) -> Result<PathBuf, PathValidationError>

Validate path is within allowed root. Prevents path traversal.