Arbitrary file read via malformed model source

Path traversal in MLflow 2.9.2 and earlier allows remote attackers to read arbitrary server files through a crafted model-version source. The _create_model_version() handler checks a parsed source value but later stores the original value, so URL fragments or parameters bypass relative-path validation. An unauthenticated network request can then reach /model-versions/get-artifact and expose files readable by the MLflow server process.