GHSA-Q54R-JF2P-RFR2 gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

Summary In the gix crate, Cache::protectoptions in gix/src/config/cache/access.rs reads the three filesystem path-protection settings core.protectHFS, core.protectNTFS, and gitoxide.core.protectWindows with the unfiltered gixconfig::File::boolean accessor instead of the trust-aware booleanfilter...