Return whether the backend resolves a path below the repository root.
For sandbox and local-filesystem backends this performs a canonical
(symlink-resolving) containment check. For any other backend there is
no canonical check available and this returns True, so callers must
still apply safe_path for the lexical guard.
