Chrome file-upload path checks gain NTFS alternate-data-stream and kernel-alias guards

When Claude Code's Chrome integration handles a file upload, it checks the file path against a list of disallowed patterns meant to catch attempts to reference files through unusual OS-level aliases. That check now also rejects paths using NTFS alternate-data-stream syntax (paths matching :$[a-z_]) and runs an additional new check, on top of the existing checks for dev/proc/namedfork paths and split paths.