pub fn validate_project(project: &str) -> Result<()>
Validate a project identifier. It is used verbatim as a filename component, so restrict it to a safe, traversal-free character set.