Harden hostcall fs prefix checks against symlink escapes

[markthom-as]

Summary

• resolve fs hostcall paths with canonicalized prefix checks to block symlink escape
• preserve valid allowlisted access semantics for existing paths
• add regression tests for read and write symlink escape attempts

Testing

• cargo test -p provenact-cli --test hostcalls