once edit and MCP now reject package paths outside the workspace

The once edit command and the MCP apply flow now validate the package path and reject absolute paths, parent-directory traversal (../), and rooted components. Only relative paths inside the workspace are accepted, preventing accidental or malicious edits to files outside the project.