[Security] Zip slip / path traversal in tar extraction

[unrealandychan]

Both upload and fetch routes extract user-supplied .tgz archives with strip: 1 but no path validation. A crafted archive can escape the extraction directory.

Fix

Add an onentry callback to verify each resolved path stays inside the target directory.