Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks

Source: Fedora 42 scitokens-cpp Update FEDORA-2026-a6d1791c49 Scope Path Fix