pub fn validate_safe_path(path: &str) -> AppResult<()>
Validate that a path-like input cannot traverse outside its base.