fix(utils): sanitize path template folder names

tests/services/test_download_manager.py

@@ -340,6 +340,22 @@ def test_relative_path_supports_model_and_version_placeholders():
     assert relative_path == "Fancy Model/Version One"
 
 
+def test_relative_path_sanitizes_model_and_version_placeholders():
+    manager = DownloadManager()
+    settings_manager = get_settings_manager()
+    settings_manager.settings["download_path_templates"]["lora"] = "{model_name}/{version_name}"
+
+    version_info = {
+        "baseModel": "BaseModel",
+        "name": "Version:One?",
+        "model": {"name": "Fancy:Model*", "tags": []},
+    }
+
+    relative_path = manager._calculate_relative_path(version_info, "lora")
+
+    assert relative_path == "Fancy_Model/Version_One"
+
+
 async def test_execute_download_retries_urls(monkeypatch, tmp_path):
     manager = DownloadManager()