Read-deny rules can no longer be dodged with trailing spaces or invisible characters

Read-deny rules are settings that stop Claude from reading certain files. Two ways of slipping a path past them are now closed:

• Paths that end in whitespace are also checked with /. added on the end.
• A trailing byte order mark (U+FEFF, an invisible character) in a path is treated as a space before the check.

Before, the check used the path only exactly as given.