LeoVasanko
37af433704
Enforced at three layers: the site editor validates slug inputs before committing (rename and new-page rows), the API rejects such paths in _check_reserved (page save/delete, structure moves, editor socket), and the content catch-all 404s them without a tree lookup.