pub fn normalize_and_check(path: &str) -> Result<String>
Normalize path to detect hidden traversal attempts