utils: Modify sanitize_filename(): convert invalid chars to hex representation,

this makes the filenames deterministic for the same session,
and helps to not download a file more than once