Package render holds small text-shaping helpers shared by the CLI and
LSP surfaces: everything user-visible passes through here so untrusted
input (git metadata, source-derived signatures) is handled once.
Sanitize strips control characters before untrusted text reaches a
terminal or editor: commit titles and authors come straight from git
history, where ANSI/OSC escape sequences are legal and can manipulate
the viewer's terminal (title changes, cursor moves, fake hyperlinks).