[kridaydave]

Bugs

• TST-02: path-traversal test never fed a ../ path to oot update; git probe optional.
• TST-09: CLI tests never precleaned pid-based temp dirs.

What was wrong

• tests/update_test.rs:390 test_update_rejects_path_traversal only recorded/updated a valid nested path; the sole hasDotdot assertions lived in if let Ok(...) around a git fsck probe, so Oot validation never ran and missing git skipped it silently.
• tests/cli_test.rs:51 create_dir_all without prior remove_dir_all on pid-based temp dirs; stale files could poison a later run.

Fix

• Rewrite the traversal test to hand-craft a tree with a ../escape.txt blob via git hash-object --literally, store a change record pointing at it, and assert oot update --change <id> --force fails naming the traversal path without writing outside the repo. Git is now required via expect, not skipped.
• Add preclean remove_dir_all before create_dir_all at all 8 cli temp-dir sites.

Verification

CI green (fmt, clippy, tests, release build, adjudication) + rewritten test_update_rejects_path_traversal which exercises Oot validate_tree_path end-to-end (fails if validation is disabled or the file escapes).