Check --branch and --path globs before creating an agent

Each glob is trimmed, and an empty one, more than 32, one over 256 bytes, or one starting or ending with / is refused before anything is resolved, as the API would refuse it.