pub fn check_scheme(url: &Url) -> Result<(), FetchDenial>
Validate a URL’s scheme and reject non-http(s) up front.