A path-traversal guard for MCP file tools that actually survives symlinks

· Dev.to