fix: harden cache migration symlink checks (#232)

Refuse a symlinked legacy cache root before composing migration targets, and treat any destination filesystem entry, including a dangling symlink, as occupied so the best-effort migration preserves the no-overwrite invariant.

Refs #229

Refs #230