Canonical path verification for symlink safety in ServeFiles

[SeanTAllen]

FilePath.from() checks the normalized path, not the resolved path. If a symlink inside the served directory points outside it, FilePath.from() succeeds and the file is served.

A canonical path verification step after FilePath.from() would catch this by resolving symlinks and re-checking that the final path is still under the root.