lark-cli rejects absolute paths for --file, --output, --output-dir,
and @file with 'unsafe file path'. Document this in lark-shared so
agents know to use cwd-relative paths or stdin for data input.
Change-Id: I50cf801c2c5d0e3cbb98a76e1752d410518c8636