Preserve executor path URIs in permission profile workspace roots

[copyberry]

Preserve executor path URIs in permission profile workspace roots

Why

Executor profile roots can use path conventions that are not native to the current host. Converting them to host paths during configuration or turn reconstruction can reject or drop those roots, while case-insensitive comparison can hide Windows path spelling changes.

What changed

• Store profile roots as URI-backed ProfileWorkspaceRoot values throughout permission snapshots and thread settings, preserving spelling in equality and deduplication.
• Keep effective workspace roots as PathUri values for permission materialization and status summaries. Convert Windows sandbox root hints to native paths only at native Windows sandbox boundaries, rejecting incompatible roots.
• Omit the legacy rollout workspace_roots field when profile roots cannot be represented as host paths, retaining the compiled permission profile.

Testing

Add regression coverage for Windows and UNC root spelling changes, settings restoration and turn recording with foreign roots, executor-root status display, and backend-specific Windows root conversion.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}