pub fn sanitize_filename(name: &str) -> String
Sanitize a filename for safe filesystem use. Strips path traversal, dangerous characters, and truncates to 64-char stem.