Function validate_directory 

pub fn validate_directory(
    path: &Path,
    install_root: &Path,
) -> Result<(), BundleDirectoryError>

Reject directories that escape <install>/shared/. Run at scaffold time and inside crate::schema::Config::validate.