fix: sanitize uploaded filenames before storage to match LibreChat (#32)

LibreChat translates spaces and special characters in filenames to
underscores, but KCR was storing the original unsanitized name. This
caused the model to fail on first file access since the name on disk
didn't match what LibreChat reported.