pub fn is_safe_relative_path(p: &Path) -> bool
Check if a path is safe for use as a relative path within a workspace. Rejects absolute paths, parent directory components (..), and other unsafe patterns.