fix(security): harden --upload/--output file I/O against traversal, symlink escape, and TOCTOU races#363

abhinavkale-dev wants to merge 6 commits intogoogleworkspace:maingoogleworkspace/cli:mainfrom

abhinavkale-dev:path-hardening-upload-outputabhinavkale-dev/cli:path-hardening-upload-outputCopy head branch name to clipboard