Use url crate for handling URLs

[clarfonthey]

Mentioned in #2311 but posting a dedicated issue to track it properly. Right now, the crate uses strings exclusively to track URLs, but we should probably use the url crate instead since it will allow earlier validation (e.g. passing an invalid base_url is an immediate error) and probably simplify some of the logic that existing code uses for URLs (replaced with dedicated methods).