Use concrete workspace paths for glob-based configuration

When workspace keys are directory glob patterns, expand them into the exact discovered workspace paths rather than treating patterns as workspace identities. Validate the expanded mapping so that a concrete path matched by more than one configured glob is rejected with a clear ambiguity error. Include regression coverage for overlapping patterns and verify representative glob syntaxes resolve to the expected concrete workspace path.