feat(storage): Add guard for non-relative subpath Kestra URI

[loveysuby]

What changes are being made and why?

When providing Kestra access URI, an exception handling logic was added to prevent the injected path from being a resource dependent on the base path.

How the changes have been QAed?

    private URI getKestraUri(String tenantId, Path path) {
        Path prefix = (tenantId == null) ?
            basePath.toAbsolutePath():
            basePath.toAbsolutePath().resolve(tenantId);
        subPathParentGuard(path, prefix);
        return URI.create("kestra:///" + prefix.relativize(path).toString().replace("\\", "/"));
    }

    private void subPathParentGuard(Path path, Path prefix) {
        if (!path.toAbsolutePath().startsWith(prefix)) {
            throw new IllegalArgumentException("The path must be a subpath of the base path with the tenant ID.");
        }
    }

---

Implemented for exception handling logic conventions within the same class. In the basepath branch, the path return logic was unified to resolve to correct readability.

[loicmathieu]

Hi, thanks for your contribution.

Can you add a test for the new behavior?