[CodeQL][high] go/path-injection

[github-actions]

• Rule: go/path-injection (go/path-injection)
• Severity: high
• State: open
• Tool: CodeQL
• Alert: https://github.com/KooshaPari/cliproxyapi-plusplus/security/code-scanning/122

[KooshaPari]

Auto-closing: superseded by current security/CI sweeps. Re-open if still actionable.