Limit submit image path access

[walker1211]

Summary

• Stage local reference images for async submit jobs into a configured input directory.
• Restrict server-side image lookup to relative paths inside that directory to address the CodeQL path-injection alert.
• Add storage.image_input_dir configuration and regression tests for validation and staging.

Test plan

• go test ./...
• git diff --check