Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

eng/pr-risk-scan.mjs

@@ -148,7 +148,7 @@ function normalizeRelativePath(value) {
     return "";
   }
 
-  if (cleaned.includes("..")) {
+  if (/(^|\/)\.\.(\/|$)/.test(cleaned)) {
     throw new Error(`Unsafe relative path in changed files list: ${value}`);
   }