How Benchy validates untrusted 3D files

Inside Benchy's upload pipeline: quarantined files, bounded Rust parsers, server-side policy checks, and the benchy-mesh validation engine.