拒绝 UI 资源路径反斜杠

阻止浏览器路径归一化导致的资源目录逃逸

当前资源尚未上线，不增加迁移流程

apps/ai-game-creator-shell/src-tauri/src/ui_editor/html_renderer/assets.rs

@@ -20,6 +20,7 @@ pub(super) fn asset_url(path: &str) -> Result<String, String> {
     let path = path.trim();
     if path.is_empty()
         || path.starts_with('/')
+        || path.contains('\\')
         || path.split('/').any(|part| part == "..")
         || path.chars().any(|character| {
             character.is_control() || matches!(character, '\'' | '"' | '`' | '(' | ')')