Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

fix: restrict install.python_packages paths to the build context

The requirements file and local wheels accepted arbitrary paths. The
requirements file was read on the host without any containment check,
so a path like ../../etc/passwd escaped the build context and its
content leaked into build logs and image metadata.

- frontend: resolve paths against the build context (thread-local),
  reject paths escaping it (absolute, .., symlinks), and normalize to
  a context-relative path for reuse inside the container
- compile: verify the symlink-resolved requirements file stays inside
  the build context before reading it on the host, which also covers
  graphs reloaded from image labels

Signed-off-by: Keming <kemingy94@gmail.com>