* fix: resolve dot segments before checking path rules (GHSA-chxv-mvjv-f92j)
* fix: match trailing-slash path rules against the bare collection
* fix: match destination rules against the URL path when no prefix is set
* fix: restrict collections named by a rule without granting access to them
* docs: cleanup
Directory makes it more clear of what it is. In addition, this will make it easier when
allowing for multiple directories in the future, since we can just name it 'directories', which is more clear than 'scopes'.