src,permission: do not grant cwd read access without entrypoint

[RafaelGSS]

src,permission: do not grant cwd read access without entrypoint

[nodejs-github-bot]

Review requested:

• @nodejs/security-wg

[codecov]

Codecov Report

❌ Patch coverage is 0% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 90.48%. Comparing base (dd9777b) to head (f18fd0a).
⚠️ Report is 34 commits behind head on main.

Files with missing lines	Patch %	Lines
src/env.cc	0.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #66645      +/-   ##
==========================================
- Coverage   92.78%   90.48%   -2.31%     
==========================================
  Files         422      791     +369     
  Lines      193692   277097   +83405     
  Branches    29881    53274   +23393     
==========================================
+ Hits       179714   250721   +71007     
- Misses      13650    16775    +3125     
- Partials      328     9601    +9273     

Files with missing lines	Coverage Δ
src/env.cc	84.16% <0.00%> (ø)

... and 509 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.