[aikido-autofix]

This patch mitigates potential file inclusion attacks via path traversal vulnerabilities in multiple deployment and utility functions by implementing path validation checks that ensure resolved file paths remain within their intended base directories before performing file read operations across five files: 'safe-utils.ts', 'deployment-cache.ts', 'checkDeploymentAddressConsistency.ts', 'deploymentHelpers.ts', and 'utils.ts'.

Aikido used AI to generate this PR.

Medium confidence: Aikido has validated similar fixes and observed positive outcomes. Validation is required.

[0xDEnYO]

Closing: wrong repo for this fix.

Every file this PR touches is byte-identical to lifinance/contracts main — pure synced upstream content with zero Tron-fork delta. A fix landed here does not fix upstream and gets clobbered or conflicts on the next syncUpstreamContracts run. Aikido scans this fork as an independent repo, so it duplicates every upstream finding here.

If the finding warrants hardening, it belongs in lifinance/contracts (cf. the merged upstream equivalent lifinance#2143) and will reach this fork via sync. Superseded also by #31/#32/#35, which re-report the same SAST rule.