praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)

Impact A remote Telegram user can write files to arbitrary paths inside an agent's persistent workspace volume praktor-wk-, mounted at /workspace/agent, escaping the documented uploads/ directory. The attacker controls the Telegram document filename, which was concatenated into the destination pa...