dbf113524e
* fix(cli): guard external directory boundaries * test(cli): move boundary regressions to kilocode tests * fix(cli): scope root guard to permission prompts * test(cli): isolate boundary regression fixtures * test(cli): simplify boundary regression coverage