pub fn validate_model_string(model: &str) -> Result<(), ClawftError>Expand description
Validate a model string against security rules.
Accepts strings matching provider/model-name or bare model-name.
Rejects strings containing shell metacharacters, newlines, control
characters, or other dangerous patterns.