fix/issue-26
next
Add ValidatePath() enforcing: valid UTF-8, forward-slash only, relative paths, no '..' segments, no empty segments. Called from both AddFile and AddFileWithHash. Proto comments document the rules. Closes #26