fix(repos): guard writes to symbolic links

Detect existing symlinks through the Git tree and require an explicit opt-in before changing their targets. Return the resolved repository target so callers can safely update the linked file instead.

Refs #2997

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>