pub fn sanitize_slug(slug: &str) -> String
Keep ASCII alphanumeric and underscores; everything else becomes _.
_