Rsync dry-run looked safe but the real run removed files

A community rsync recipe was validated with dry-run output. In production, one path resolved differently and the cleanup removed files operators assumed were protected.