fix(strix): accept legal Git path punctuation #606

Problem

The central Strix required workflow rejects a legal Git path containing comma and parentheses while auditing ContextualWisdomLab/aFIPC#160. The changed path is quoted and passed after a Git double-dash boundary, but the bounded character allowlist currently classifies it as unsafe and exits 2 before scanning.

Acceptance criteria

• Accept comma and parentheses in normalized repository-relative paths.
• Preserve fail-closed rejection of absolute paths, traversal, leading or trailing whitespace, alternate separators, control characters, bidi controls, and Git pathspec syntax.
• Add an integration regression proving a legal punctuated path is materialized from the validated PR head as non-executable scan data.
• Pass the focused Strix gate test, required-workflow smoke test, shell syntax checks, and diff hygiene.

Agent: Codex
Recorded: 2026-07-21T12:00:00+09:00
Phase: Ops