fix(workboard): refuse unsafe SSHFS SQLite storage (opens in new tab)

Preserve rollback journaling for NFS and SMB-backed stores, refuse SSHFS after symlink-aware mount classification, and close Workboard database handles when filesystem policy rejects initialization.