Function is_safe_csv_upload_filename 

pub fn is_safe_csv_upload_filename(value: &str) -> bool

Returns whether a caller-visible filename is safe for a bounded CSV upload.

This is a protocol-level lexical policy only. The Trusted runtime remains authoritative for media type, content length, digest, and CSV validation.