refactor(server): replace custom remote clients with macro-based implementation

- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services
- Simplified remote client creation logic using declarative macro approach
- Maintained same functionality while reducing code duplication across services

security(bare): enhance path traversal protection with comprehensive validation

- Added early relative_path validation to prevent path traversal attacks
- Implemented unified path validation to avoid TOCTOU race conditions
- Enhanced canonicalization checks for both existing and non-existent paths
- Added detailed logging for path traversal detection attempts

feat(cache): migrate from CLruCache to Moka with TTL and invalidation support

- Replaced clru dependency with moka for improved caching capabilities
- Added 300-second time-to-live for cache entries
- Implemented repository-specific cache invalidation mechanism
- Enhanced cache operations with thread-safe async support

refactor(commit): improve security validation for commit operations

- Added ref name validation to prevent command injection in cherry_pick_commit
- Implemented revision validation for commit selectors
- Added comprehensive input validation for create_commit parameters
- Enhanced file path validation to prevent traversal

archive/get_archive.rs

@@ -20,13 +20,19 @@ impl GitBare {
 
         let (tx, rx) = tokio::sync::mpsc::channel(16);
 
+        // Validate revision before spawning (cannot use ? inside spawn_blocking closure)
+        let revision = match request.treeish.and_then(|s| s.selector) {
+            Some(object_selector::Selector::Oid(oid)) => oid.hex,
+            Some(object_selector::Selector::Revision(name)) => {
+                crate::sanitize::validate_revision(&name.revision)
+                    .map_err(|e| tonic::Status::invalid_argument(e.to_string()))?;
+                name.revision
+            }
+            None => "HEAD".into(),
+        };
+
         // Spawn the blocking git subprocess in a dedicated thread
         tokio::task::spawn_blocking(move || {
-            let revision = match request.treeish.and_then(|s| s.selector) {
-                Some(object_selector::Selector::Oid(oid)) => oid.hex,
-                Some(object_selector::Selector::Revision(name)) => name.revision,
-                None => "HEAD".into(),
-            };
             let options = request.options.unwrap_or_default();
             let format = archive_options::Format::try_from(options.format)
                 .unwrap_or(archive_options::Format::ArchiveFormatTar);