string-util: explicitly cast character to unsigned

This also adds comment why we cast to unsigned.

Follow-up for 7971f903.

Addresses the comment https://github.com/systemd/systemd/pull/19544#discussion_r628472794.