builtin-grep: tighten path wildcard vs tree traversal.