ZIP extra-member flags

Trap: checking encryption and compression only when opening required ZIP members looks safe because unused extras are never consumed, but malformed or encrypted extras still make the authenticated archive ambiguous. Fix: validate every central-directory entry before reading any member; reject all encryption-related flags and compression methods outside the explicit archive-format allowlist.