Link values are branded as `${string}:${string}`, so every writer needs a cast. Funnel them through one helper that asserts the brand only after the value has parsed as an http(s) URL, with bare domains assumed https.