fn sanitize_relative_path(path: &Path) -> PathBuf
Normalizes an untrusted path relative to the source root, discarding leading separators, drive prefixes, and parent components that would escape that root.