Fix/errors validations security

[Sharmaz]

Changes:

• Prevent path traversal by sanitizing appName with path.basename() before joining with process.cwd()
• Skip symlinks during recursive template copy to block symlink-based escape attacks
• Throw errors in initialize and renamePackageJsonName instead of swallowing them; CLI catches and exits with code 1
• Add .catch() on app() call to surface unhandled async errors
• Validate app name length against npm's 214-character limit

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None