Add validateHostname / validateOptionalHostname helpers to host_utils.dart that reject values containing @, /, \, or control characters. Wire them into AddAccountScreen and EditAccountScreen for all host fields. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>