Deep-link cwd validation blocks parent-directory segments and network-link resolution

Deep link handling now rejects working directories that contain parent-directory (..) segments, in addition to the existing UNC-path, absolute-path, and control-character checks. It also separately rejects a cwd that resolves through a network link.