Function resolve_for_syscall 

fn resolve_for_syscall(
    path_ptr: u64,
    path_len: u64,
    want_read: bool,
    want_write: bool,
    want_execute: bool,
) -> Result<String, SyscallError>

Resolve a userspace path to an absolute path and enforce silo policy.

Combines: read_user_path → resolve against CWD → silo enforce. Used by most syscall handlers to avoid duplicating this 4-line pattern.