getWorkspaceNames overlapping globs

Trap: expanding workspace globs into a deduplicated list looks sufficient because output has no duplicates. Fix: map each concrete directory to every matching configured key and reject any directory with multiple matches; otherwise release configuration is ambiguous. Expand only safe, repository-contained globs relative to the explicit configuration directory, keep directories only, ignore node_modules, sort results, and preserve exact spelling.