Function validate_artifact_mutation 

pub fn validate_artifact_mutation(
    path: &str,
    workspace_root: &Path,
    operation: &str,
) -> Result<()>

Validate that an artifact path is safe for a destructive operation (delete or move).

Beyond the standard path-traversal and absolute-path checks already performed by ArtifactBundle::validate(), this adds domain-level guards that prevent accidental loss of critical project files.