Confine write_file target to the files directory

Restricts file write operations to prevent path traversal attacks.