Worktrees created outside Prowl under symlinked roots like /tmp could not be deleted: the row briefly vanished then reappeared after the next refresh. `worktrees(for:)` stores paths via `standardizedFileURL`, which resolves the /private symlink (e.g. /private/tmp/foo -> /tmp/foo), while the removal guard compared against the raw paths reported by `git worktree list --porcelain` (/private/tmp/foo). The mismatch failed the guard, so `removeWorktree` silently returned without relocating or pruning anything, and the optimistic UI removal was undone by the next worktree refresh. Canonicalize both sides through the same `standardizedFileURL` transform so externally-created worktrees match and actually get removed.