pub fn clean_filename(raw: &str) -> String
A safe display name: the last path component without control characters.