pub fn sanitize_subpath(subpath: &str) -> Result<String>
Sanitize a subpath to prevent path traversal.
Returns an error if the subpath contains .. segments.
..