External file disclosure via symlink traversal

Path traversal in CodeWhale before 0.8.64 allows attackers to read external files via crafted workspace symlinks to image paths. In crates/tui/src/vision/tools.rs, image_analyze joined image_path to the workspace and read it without canonicalizing the target, so symlinks that pointed outside the workspace were followed and their bytes were embedded into the vision request. Because image_analyze is auto-approved as a ReadOnly tool, malicious repository content or prompt injection can exfiltrate readable file bytes to the configured vision endpoint without an approval prompt.