Harden auth/vault path sanitization and clean WeKnora docs

rust/crates/mnote-web/browser/sidebar-filetree-upload-runtime.js

@@ -46,7 +46,7 @@ export const createSidebarFileTreeUploadRuntime = (dependencies = {}) => {
     });
   }
 
-  function blockReadonlyFileTreeAction(action, detail, message) {
+  async function blockReadonlyFileTreeAction(action, detail, message) {
     var normalizedAction = String(action || 'drop').trim() || 'drop';
     var text = String(message || '目标位置是只读，不能拖放到这里').trim();
     var targetRowId = String(detail && (detail.targetRowId || detail.rowId) || '').trim();
@@ -75,7 +75,7 @@ export const createSidebarFileTreeUploadRuntime = (dependencies = {}) => {
         row.setAttribute('data-readonly-message', text);
       }
     }
-    window.alert(text);
+    await window.mnote.alert(text);
     return false;
   }