fix: trust recorded workflow session previews (#1456)

Allow Fleet and inspect to read exact runtime-recorded child session files only when their resolved paths remain under the Pi sessions base. Existing trusted roots remain unchanged.