Function isValidJsIdentifier

Sanitizes a relative URL string.

• Ensures it starts with /
• Resolves away path traversal sequences (../../etc)
• Preserves query string and hash