Fix scope path boundary validation to deny sibling-prefix authorization bypasses Reject parent-directory traversal in scope paths, including encoded traversal forms Add regression tests covering sibling-prefix and traversal authorization checks

Source: Fedora 43 scitokens-cpp Important Boundary Validation Update Found