Filename sanitization for Go