Function validate_url_for_safety 

fn validate_url_for_safety(url: &Url) -> Result<(), String>

Same checks as validate_url_safety but takes a pre-parsed reqwest::Url. The redirect-policy closure receives Url values directly, so this avoids a parse round-trip on every hop.