fix(worker): stop sibling worktrees from landing inside the repo tree

Path.GetDirectoryName returned workingDir itself instead of its parent
whenever list.WorkingDir ended in a directory separator, placing
.claudedo-worktrees inside the target repo's own working tree. Add
WorktreeRootResolver to normalize the trailing separator before deriving
the sibling root and to guard that the resulting worktree path never
lands inside workingDir, used by both WorktreeManager and
PlanningSessionManager. Add a startup sweep (LegacyWorktreeFolderRecovery)
that warns when a list's working dir already contains a leftover
.claudedo-worktrees folder from before the fix.

tests/ClaudeDo.Worker.Tests/Runner/WorktreeManagerTests.cs

@@ -189,6 +189,26 @@ public class WorktreeManagerTests : IDisposable
         Assert.DoesNotContain(task.Id, worktreeList);
     }
 
+    [Fact]
+    public async Task CreateAsync_TrailingSeparatorOnWorkingDir_PlacesWorktreeOutsideRepo()
+    {
+        if (!GitAvailable) { Assert.True(true, "git not available -- skipping"); return; }
+
+        var repo = CreateRepo();
+        var workingDirWithSeparator = repo.RepoDir + Path.DirectorySeparatorChar;
+        var (task, list) = MakeEntities(workingDirWithSeparator);
+        var (mgr, db) = await CreateManagerAsync(task, list);
+
+        var ctx = await mgr.CreateAsync(task, list, CancellationToken.None);
+        _worktreeCleanups.Add((repo.RepoDir, ctx.WorktreePath));
+
+        var repoDirFull = Path.GetFullPath(repo.RepoDir);
+        Assert.False(
+            ctx.WorktreePath.StartsWith(repoDirFull + Path.DirectorySeparatorChar, StringComparison.OrdinalIgnoreCase),
+            $"worktree path {ctx.WorktreePath} should not be nested inside the repo dir {repoDirFull}");
+        Assert.True(Directory.Exists(ctx.WorktreePath));
+    }
+
     private static (TaskEntity task, ListEntity list) MakeEntities(string workingDir)
     {
         var listId = Guid.NewGuid().ToString();