Sanitize path components when constructing tool-cache path.

[max-schaefer]

This ensures that the tool name, version number, and architecture each only correspond to a single path component, avoiding (accidental or malicious) path traversal and data corruption.

[max-schaefer]

/cc @thboop