fix(lsp): address codex review round 3

Final review pass on the local provider:
- Tear the instance down when `initialize` REJECTS (utf-8 negotiation, malformed
  result), not only on abort, so a permanently-rejecting `ready` is never pooled.
- Use the group-aware SIGKILL on a framing failure so helpers are reached.
- Validate maxMessageBytes and maxDocumentBytes positive at load alongside the
  other byte caps.
- Fix the location renderer's outside-workspace check to match a `..` segment
  exactly, so an in-workspace path like `..generated/a.ts` stays relative.
- Document the accepted ancestor-directory symlink-swap TOCTOU under the
  trusted-host model (O_NOFOLLOW guards only the final component).

packages/lsp/tool-lsp/tests/render.spec.ts

@@ -60,6 +60,12 @@ describe('renderUri', () => {
     expect(renderUri(pathToFileURL(WS).href, WS)).toBe('.')
   })
 
+  it('keeps an in-workspace path whose first segment starts with dots relative', () => {
+    // `..generated` is a real in-workspace dir, not a parent escape; only a `..` segment is external.
+    const uri = pathToFileURL(join(WS, '..generated', 'a.ts')).href
+    expect(renderUri(uri, WS)).toBe('..generated/a.ts')
+  })
+
   it('keeps a non-file URI verbatim', () => {
     expect(renderUri('untitled:Untitled-1', WS)).toBe('untitled:Untitled-1')
     expect(renderUri('jdt://contents/Foo.class', WS)).toBe('jdt://contents/Foo.class')