Zed Moves Toward Secure-by-Default: Introducing Worktree Trust