Development record

GHSA-fpf2-pg82-72rj: abcd site build and site check follow symlinks in the output path, and the .abcd-site-build marker is name-only. inspectOutDir uses os.ReadDir/os.Stat (follows a symlinked leaf), purgeOutDir runs os.RemoveAll through the same path, and MkdirAll plus os.OpenRoot open a symlink's target as the containment root; no Lstat/EvalSymlinks guard exists, and an ancestor symlink is missed even by a leaf-only Lstat. A committed marker forges ours classification so a later --out purges the directory's other entries (with --out . that includes .git). CWE-59.