fix(harness): reject workspace path traversal (#2358)

### Background

In `ROOTED` filesystem mode, relative paths containing parent-directory
segments such as `../secret.txt` could be normalized outside the
configured workspace root. Similar traversal paths could also reach
workspace read, write, append, and copy operations through
`WorkspaceManager`.