pub fn normalize_request_path(path: &str) -> Option<&str>
Normalize and reject dangerous path segments before allowlist checks.