Development record

site build's two lint.LoadConfig(joinRepo(...)) reads delegate into the external lint package and are not ancestor-symlink contained like the rest of site's reads now are (post-#487). A committed directory symlink ancestor of the lint config path is followed. Separate hardening in the lint package. Flagged by the #487 fix agent.