pub fn sanitize_skill_relative_path(raw: &str) -> Option<String>
Sanitize a path within a skills/<bucket>/<path> so it cannot escape the bucket root.
skills/<bucket>/<path>