Prevent terminal symlink traversal via recursive grep

dev/test_athena_terminal_mcp.py

@@ -80,6 +80,8 @@ class AthenaTerminalTests(unittest.TestCase):
             self.module.validate_arguments("rg", ["--pre", "sh", "x"], self.workspace)
         with self.assertRaises(PermissionError):
             self.module.validate_arguments("find", ["."], self.workspace)
+        with self.assertRaises(ValueError):
+            self.module.validate_arguments("grep", ["-R", "Athena", "."], self.workspace)
 
     def test_validation_parses_without_execution(self):
         result = self.module.validate_source({"path": "valid.json", "kind": "auto"})