pub fn sanitize_filename_component(input: &str) -> String
Sanitize a filename component for safe Path::join usage.
Path::join
This is intentionally conservative; it prevents path separators and traversal.