fix(tools): reject symlink loops in tool paths and skip special skill-archive members (#322)