optim(utils): sanitize and clamp subpaths to handle path escaping

[TrafalgarZZZ]

Ⅰ. Describe what this PR does

Ⅱ. Does this pull request fix one issue?

fixes #XXXX

Ⅲ. List the added test cases (unit test/integration test) if any, please explain if no tests are needed.

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
30.4% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

❌ Patch coverage is 75.00000% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 65.13%. Comparing base (05f0665) to head (70d75f1).

Files with missing lines	Patch %	Lines
pkg/csi/plugins/nodeserver.go	50.00%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6159      +/-   ##
==========================================
- Coverage   65.13%   65.13%   -0.01%     
==========================================
  Files         485      485              
  Lines       34039    34045       +6     
==========================================
+ Hits        22171    22174       +3     
- Misses      10127    10129       +2     
- Partials     1741     1742       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.