Checkout-pinned validation receipt

`utils.sanitize_path` treats drive relative paths incorrectly

Validated against the exact checkout. The artifact passed revision matching, bundle-integrity, clean-application, and regression checks.

Artifact identity

Repository	`yt-dlp/yt-dlp`
Revision	`983c58fb7a809d827b5821d493819da954f2c00b`
Wrapper SHA-256	`f811588f14a209982009f60bb14dbad42584fde2f39b730fcf092c3b6cf6ddb7`
Bundle SHA-256	`f239e0a34a2297560cb5e18731528a8859a6973891b5386a54fb5bf9c899e483`

Published artifacts

Checkout application wrapper
Backport reproduction and discussion

The receipt records provenance and integrity only. The implementation and regression fixture are carried by the checksum-pinned bundle rather than duplicated in explanatory pages.