st/oxr: Stricter path verification in xrSyncActions