pub fn validate_plugin_segment(segment: &str, kind: &str) -> Result<(), String>
Validates a single path segment used in plugin IDs and cache layout.