Use os.Root for filesystem access

[jech]

Now that we depend on Go 1.24, we should be using os.Root for filesystem access instead of our own, homebrew protections against directory traversal.

• group/description
• diskwriter: a6afe7f
• static web server: c1618d1
• recordings web server: 492eafa