Security: whitelist precedence and sandbox path handling for non-existent temp paths; minor import cleanups; all tests passing

src/docx_handler.rs

@@ -1,13 +1,11 @@
 use anyhow::{Context, Result};
 use docx_rs::*;
 use std::fs::{self, File};
-use std::io::{Read, Write};
 use std::path::{Path, PathBuf};
-use tempfile::NamedTempFile;
 use uuid::Uuid;
 use chrono::{DateTime, Utc};
 use serde::{Deserialize, Serialize};
-use tracing::{debug, info, warn};
+use tracing::{info, warn};
 
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct DocxMetadata {