pub fn validate_relative_path(path: &str, field: &str) -> Result<(), String>
Validates a config path as a relative path under a Steel-owned root.