fix(security): follow symlinks in workspace boundary check (#169)

fix(security): follow symlinks in workspace boundary check (#169) #1322