- Fix typo: santizedFileName -> sanitizedFileName in upload.tsx
- Add sanitize(jobId) in download.tsx for defense-in-depth path traversal protection
Even though jobId is validated against the database, sanitizing it prevents
any potential path traversal via malicious job IDs.