validnote check instead of . -> _ conversion

The new check is supposed to syntactically restrict
note names with folder structure to canonical form
and remain within $SNOTES_DB.

Also prohibit access to the .git folder.

/* Links can still be used to work around all that,
but I see not reason to take care of them. */