pub fn normalize_dns(hostname: &str) -> String
Normalize a DNS hostname to canonical form (IDNA + lowercase)