Function resolve_under_root 

pub fn resolve_under_root(
    root: &Path,
    rel: &str,
) -> Result<PathBuf, ExplorerError>

Resolve rel under root, ensuring the result stays within the root after symlink resolution.