validateResourceId plain identifiers

Sentry resource IDs, slugs, and issue IDs must always be plain strings; reject ?, #, %, whitespace, and control characters. Pre-encoding looks safe for URL construction, but the API client encodes again, causing double encoding, while query/fragment characters can alter URL structure. Use rejectPreEncoded(), rejectControlChars(), and validateResourceId() rather than accepting or locally sanitizing these values.