fix: prevent path traversal vulnerabilities by validating absolute paths in file unpacking and test utilities, and add workflow permissions.#204