Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root