Moves the CWE-93 sanitization fix from send-api.ts (inlined pre-rebase)
into resolveWhatsAppDocumentFileName() in document-filename.ts, following
upstream PR #82851's extraction of that helper.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>