improve/simplify trusted dir handling

[MichaelMure]

Confidence Score: 5/5

The PR appears safe to merge; both numbered Windows findings are fixed, and no new actionable issue was found.

Summary

Moves repository trust checks into Discover, which now accepts a working-tree path and returns ErrUntrusted when ownership and protected safe.directory settings do not allow it.

• Resolves Windows directory links before checking their owners.
• Uses an impersonation token for linked administrator-token checks.
• Adds Git comparison tests and root-run ownership tests in CI.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A["Discover(dir)"] --> B["Find the git directory and paths to check"]
  B --> C{"All existing paths owned?"}
  C -->|Yes| F["Return Env"]
  C -->|No| D["Load protected settings with GitDir cleared"]
  D --> E{"safe.directory allows the path?"}
  E -->|Yes| F
  E -->|No| G["Return ErrUntrusted"]

Loading

_{Reviews (3) · Last reviewed commit: "improve/simplify trusted dir handling" · Reviewed by Greptile}