fn validate_filename(filename: &str) -> Result<(), String>
Validate a filename: alphanumeric + -_, must end with .md, no path separators.
-_
.md