fix(download_file): sanitize header-derived filename with basename

Agent-Logs-Url: https://github.com/fabiocaccamo/python-fsutil/sessions/32602292-a86d-4d8e-8262-dae539be404a

Co-authored-by: fabiocaccamo <1035294+fabiocaccamo@users.noreply.github.com>

Author: Copilot

src/fsutil/operations.py

@@ -213,7 +213,7 @@ def download_file(
             filename_pattern = r'filename="(.*)"'
             filename_match = re.search(filename_pattern, content_disposition)
             if filename_match:
-                filename = filename_match.group(1)
+                filename = os.path.basename(filename_match.group(1))
             # or detect filename from url
             if not filename:
                 filename = get_filename(url)