Ensure we are hadling common tar bombs and zip bombs correctly

See:
- https://www.bamsoftware.com/hacks/zipbomb/
- https://github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183
- https://github.com/python/cpython/issues/109858