按规划继续工作

结论：补齐 OPFS 会话快照自定义文件名与非法快照文件名拒绝验证，覆盖 Node OPFS 与 Chromium OPFS 路径，并通过 host/WASM/browser 聚合验证。

wasm-port/docs/source-reuse-map.md

@@ -83,8 +83,9 @@ Current validation is intentionally mechanical:
   `runtime/opfs/file-service.js` adapter. `runtime/opfs/path-model.js` now
   defines paths for INI, tool table, parameter file, G-code program,
   preview-cache, and session-snapshot targets. `runtime/opfs/snapshot-store.js`
-  adds a generic JSON session snapshot envelope and validates its format,
-  version, session id, metadata, and payload shape.
+  adds a generic JSON session snapshot envelope, supports custom snapshot
+  filenames under the session directory, and validates its format, version,
+  session id, metadata, payload shape, and filename boundary.
   `runtime/opfs/machine-file-store.js` adds pure-text storage for INI, tool
   table, parameter file, and G-code program content.
   `runtime/opfs/linuxcnc-parameter-bridge.js` copies OPFS-backed parameter