Administrator code execution via mistaken token-owner checks

Unverified ownership in gitoxide before 0.13.3 allows local users to execute commands as an elevated Windows administrator. The Windows is_path_owned_by_current_user check passes token_owner to administrator SID and membership checks instead of validating folder_owner. Exploitation requires a limited user-controlled repository, an unfiltered elevated administrator token, a dependent operation that trusts gix-sec, and interaction with configuration or hooks; cloning is unaffected.