pub fn is_safe_path(path: &Path) -> bool
Validate path to prevent directory traversal attacks. This is a conservative check used before performing mutations.