pub fn validate_idempotency_key(key: &str) -> AppResult<&str>
Validates a client-supplied idempotency key (printable ASCII, 1..=255).