pub fn html_entity_decimal_encode(payload: &str) -> String
HTML decimal entity encoding — each character becomes &#DD;.
&#DD;
Context: ONLY safe in HTML contexts where the browser decodes entities.