The detail pane renders `infoHash` and `magnet` verbatim, whereas the
result name is passed through `cleanText()`. A malicious or hijacked
indexer can embed control bytes — e.g. an OSC-52 clipboard-write
sequence — in a magnet or info hash; those bytes are then written to the
terminal when the user opens that result's detail pane.
Add `stripControl()` (removes C0/C1 controls and DEL) and apply it to
both fields at render. Unlike `cleanText()`, it preserves the exact
remaining characters — no whitespace folding, NFC, or "Untitled"
fallback — which is correct for identifiers and URLs.
