fix(server): reject worktree delegation from a checkout outside the project (#20213)