pub fn slash_encoded_path(segments: &[&str]) -> String
Produce a path that uses ONLY percent-encoded slashes, so a WAF that splits on literal / sees one segment but the origin (after percent-decoding) sees the full path.
/