Workspace path helpers for file operations.
Vibe currently follows Pi-style local-agent semantics: paths are resolved from the current workspace, but absolute and parent-relative paths are allowed. A stricter multi-root permission model can be added later when eval and command execution can be governed by the same policy.