This builds off suggestion to reuse logic used already within `gh run download` for detecting path traversals. This largely works but runs into an issue where detection logic doesn't handle non-separated traversal.