fix(serve-static): add error handler for decoding uri components

[alumowa]

This PR adds an error handler for potentially thrown URIError during decodeURIComponent that should result in a HTTP 404 rather than an HTTP 500 error.

This may happen if the encoded uri component contains an invalid sequence encoding:

URIError
Thrown if encodedURI contains a % not followed by two hexadecimal digits, or if the escape sequence does not encode a valid UTF-8 character.

Also added a test for this case 👓

[yusukebe]

LGTM!

[yusukebe]

Hi @alumowa

Thank you for the PR. I also think it's okay to return a 404. I'll merge it and release a new version.