commit: reject invalid UTF-8 codepoints