pub fn xml_escape(s: &str) -> String
Escape a string for safe inclusion in XML/plist content (single pass).