pub fn sanitize_source_provenance(input: &str) -> String
Remove URL credentials, query strings, and fragments before recording a source label in generated code. Local paths are retained as supplied.