feat: thothctl workspace preprocessing CLI and file-ingress contracts (P2)

tools/thothctl/internal/safeio/files_unix.go

@@ -47,7 +47,7 @@ func ReadCanonicalRegular(path string, maximum int64) ([]byte, error) {
 		return nil, ErrUnsafeFile
 	}
 	defer file.Close()
-	return readBoundedRegularFile(file, maximum)
+	return readBoundedRegularFile(path, file, maximum)
 }
 
 func closeUnixDescriptors(descriptors []int) {