fix: load preview resources through bounded directory capabilities