Test a location with a URL and a relative path with a `../` does not resolve outside the repository

[coordt]

See the code near this line: https://github.com/callowayproject/project-forge/blob/d370d12b1b4003b0552ec356107f196e604c04f7/tests/test_core/test_location.py#L145

Also, look for the number of this issue in the project code base.