fix(io): normalize OpenDAL listed paths

[lance-gatefixer]

Summary

• route every OpenDAL-backed provider through a Lance adapter that preserves request-compatible listed paths
• decode recursive, offset, and delimiter listing results only when they mismatch the requested prefix
• preserve upstream spellings that already match, including literal percent-escape segments
• retain native start-after pushdown where supported and compare normalized paths in the bridge fallback
• add in-memory regression cases for both raw reserved characters and literal percent escapes

Root cause

object_store_opendal rebuilds OpenDAL listing entries with Path::from, which percent-encodes reserved characters. Lance constructs dataset bases with Path::from_url_path, so a raw reserved-character base can mismatch the returned listing. Unconditionally decoding the output is also unsafe because a deliberately double-encoded URI segment relies on the existing encoded listing spelling.

The adapter now preserves any upstream location that already prefix-matches the request and decodes only mismatches. This fixes raw reserved-character bases without changing literal percent-escape paths that already worked.

Validation

• cargo test -p lance-io --no-default-features --features oss object_store::opendal_store::tests::test_list_preserves_request_path_spelling
• cargo test -p lance-io --lib -- --skip uring::tests (202 passed)
• cargo check -p lance-io --all-features --tests
• cargo fmt --all -- --check
• cargo clippy --all --tests --benches -- -D warnings

The complete lance-io library test command cannot finish in this container because io_uring initialization is denied by the environment; the non-io_uring library suite passes.

Fixes #8652

[lance-gatefixer]

Blocked: the current head is held by an unrelated intermittent macOS BQ test failure that this App cannot rerun.

Remote head 1d7f8e3 contains the current main tip b945b3e. The mac-build (stable) Check failed vector::bq::storage::tests::test_accurate_approx_mode_reduces_binary_lut_quantization_error with accurate_error=0.07851982 and normal_error=0.06913757; this PR changes only lance-io, and the identical base SHA passed the macOS Check.

I fetched and verified base ancestry, inspected the live log, ran both the failed BQ test and the OpenDAL regression successfully, and pushed the assigned branch, which was already up to date. A failed-workflow rerun was requested, but the GitHub App lacks Actions rerun permission.

The smallest unblock is for a maintainer to rerun the failed mac-build (stable) job; alternatively, rerun the full Rust workflow on this head.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[lance-gatekeeper]

✅ Gate recommendation: approve.

The shared adapter now uses the requested prefix as its compatibility boundary: it fixes raw reserved-character listings while preserving literal percent-escape paths that already round-trip. This is the right boundary because descendant spellings are otherwise ambiguous after OpenDAL decodes the backend key.