fix: proper JSON and CSV escaping for filenames in metrics output

- Added escapeJson() method to handle quotes, backslashes, and control characters
- Added escapeCsv() method to handle commas, quotes, and newlines
- Fixed malformed string literals in escape sequences
- Prevents broken output when filenames contain special characters
- Ensures downstream parsing of JSON/CSV metrics works correctly

The escaping properly handles:
- JSON: quotes, backslashes, control characters, Unicode
- CSV: commas, quotes, newlines (wraps in quotes when needed)

Author: simbo1905

json-java21-schema/src/test/java/io/github/simbo1905/json/schema/JsonSchemaCheckIT.java

@@ -203,7 +203,7 @@ private static String buildJsonSummary(boolean strict, String timestamp) {
             if (!first) totals.append(",\n");
             first = false;
             totals.append("    {\n");
-            totals.append("      \"file\": \"").append(file).append("\",\n");
+            totals.append("      \"file\": ").append(escapeJson(file)).append(",\n");
             totals.append("      \"groups\": ").append(counters.groups.sum()).append(",\n");
             totals.append("      \"tests\": ").append(counters.tests.sum()).append(",\n");
             totals.append("      \"run\": ").append(counters.run.sum()).append(",\n");
@@ -240,7 +240,7 @@ private static String buildCsvSummary(boolean strict, String timestamp) {
         java.util.Collections.sort(files);
         for (String file : files) {
             var counters = METRICS.perFile.get(file);
-            csv.append(file).append(",");
+            csv.append(escapeCsv(file)).append(",");
             csv.append(counters.groups.sum()).append(",");
             csv.append(counters.tests.sum()).append(",");
             csv.append(counters.run.sum()).append(",");
@@ -252,6 +252,88 @@ private static String buildCsvSummary(boolean strict, String timestamp) {
         }
         return csv.toString();
     }
+
+    /**
+     * Escapes a string for safe inclusion in JSON output.
+     * Handles quotes, backslashes, and control characters.
+     */
+    private static String escapeJson(String input) {
+        if (input == null) {
+            return "null";
+        }
+        
+        StringBuilder result = new StringBuilder();
+        result.append('"');
+        
+        for (int i = 0; i < input.length(); i++) {
+            char ch = input.charAt(i);
+            switch (ch) {
+                case '"':
+                    result.append("\\\"");
+                    break;
+                case '\\':
+                    result.append("\\\\");
+                    break;
+                case '\b':
+                    result.append("\\b");
+                    break;
+                case '\f':
+                    result.append("\\f");
+                    break;
+                case '\n':
+                    result.append("\\n");
+                    break;
+                case '\r':
+                    result.append("\\r");
+                    break;
+                case '\t':
+                    result.append("\\t");
+                    break;
+                default:
+                    if (ch < 0x20 || ch > 0x7e) {
+                        // Unicode escape for control characters and non-ASCII
+                        result.append("\\u").append(String.format("%04x", (int) ch));
+                    } else {
+                        result.append(ch);
+                    }
+            }
+        }
+        
+        result.append('"');
+        return result.toString();
+    }
+
+    /**
+     * Escapes a string for safe inclusion in CSV output.
+     * Handles commas, quotes, and newlines by wrapping in quotes if needed.
+     */
+    private static String escapeCsv(String input) {
+        if (input == null) {
+            return "";
+        }
+        
+        // Check if escaping is needed
+        boolean needsEscaping = input.contains(",") || input.contains("\"") || 
+                               input.contains("\n") || input.contains("\r");
+        
+        if (!needsEscaping) {
+            return input;
+        }
+        
+        // Wrap in quotes and escape internal quotes
+        StringBuilder result = new StringBuilder();
+        result.append('"');
+        for (int i = 0; i < input.length(); i++) {
+            char ch = input.charAt(i);
+            if (ch == '"') {
+                result.append("\"\""); // Double quotes to escape
+            } else {
+                result.append(ch);
+            }
+        }
+        result.append('"');
+        return result.toString();
+    }
 }
 
 /**