Validate that `path` names a container-safe file: relative, no `.`/`..` segments, no backslashes, no redundant separators (`a//b`, `a/b/`). Dotfile names like `.gitignore` are fine. Requiring a canonical form gives a file one identity across backends, some of which key on the raw string rather than path components. Used by backends to block container escapes and by archive codecs on untrusted entr
(path: &str)
source not stored for this graph (policy: none)