A path-traversal guard for MCP file tools that actually survives symlinks

If your MCP server exposes a read_file / write_file / list_dir tool, it is one clever prompt away...