Frozen ZIP metadata allowlist

Trap: ZipFile.infolist() plus opening required members looks like archive validation because zipfile checks some errors during reads, but unopened extras can carry Unix/DOS directory or special-file modes, encryption flags, unknown creator systems, and unsupported compression. Fix: inspect every member and allow only unambiguous regular-file metadata, no encryption, and explicitly supported compression methods.