Artifact read permission: new scratchpad-symlink escape check

The Artifact read-tool permission check now separately detects when a published path is a symlink that resolves outside the scratchpad carve-out, rather than treating it the same as a screened/dangerous name. This case requires user approval too, with its own distinct explanatory message.