Function normalize_path 

pub fn normalize_path(path: &str) -> String

Normalize an HTTP path to prevent ACL bypasses via encoding tricks.

• Decodes percent-encoded characters (e.g. %2F → /, %61 → a)
• Collapses duplicate slashes (// → /)
• Resolves . and .. segments
• Ensures the path starts with /