Problem: Several string utilities return or store views into their input.
A temporary std::string can leave these views dangling, although no current caller does this.
Fix: Add LIFETIMEBOUND so Clang diagnoses the misuse while preserving immediate use.
Pass the Split span by value so lvalue strings do not trigger false warnings.