processor: reject markdown image refs with path separators or parent traversal

findLocalImages used filepath.Base(ref) after stat succeeded, which
caused subdirectory or parent-directory references to pass the scan but
then fail during copy because the basename was looked up in the wrong
directory.

Fix: add isSimpleImageRef helper that accepts only flat filenames (no
path separators, no .. traversal). findLocalImages now returns the ref
unchanged, matching what copyLocalImages and claimedByMarkdown expect.

Added tests for isSimpleImageRef and negative findLocalImages cases for
subdirectory and parent-directory references.

0 files changed, 0 insertions, 0 deletions