fn decode_percent_runs(input: &str) -> StringExpand description
Decode each maximal run of %XX escapes as one UTF-8 unit, dropping a run that isn’t valid
UTF-8 (rather than emitting U+FFFD). Non-escape characters pass through. Mirrors the migration’s
safe_percent_decode, so storage and lookup agree on inputs like /%FF.