Function sanitize_label 

pub fn sanitize_label(label: &str) -> String

Sanitize a label for safe use in HTML/GraphML output.

• Strips control characters
• Truncates to 256 characters
• HTML-escapes &, <, >, ", and '