Adds protections into the built-in file system tools to prevent unintended file system operations outside of the original project working directly. Examples: - No files reads outside of `cwd` - No file writes outside of `cwd` - No file deletes outside of `cwd` Related to #5625
