zlib: validate central directory record count

[mcollina]

ZIP readers trusted the EOCD record count without checking that the parsed headers consumed the declared central directory size. Reject archives whose record count leaves central directory bytes unparsed so all ZIP reader paths agree on the archive's entries.

[pipobscure]

lgtm 👍

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.27%. Comparing base (f43086d) to head (3469b1b).
⚠️ Report is 37 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #65002   +/-   ##
=======================================
  Coverage   90.27%   90.27%           
=======================================
  Files         762      762           
  Lines      247515   247540   +25     
  Branches    46683    46690    +7     
=======================================
+ Hits       223447   223478   +31     
- Misses      15485    15489    +4     
+ Partials     8583     8573   -10     

Files with missing lines	Coverage Δ
lib/internal/zip/entry.js	98.44% <100.00%> (+<0.01%)	⬆️
lib/internal/zip/headers.js	97.28% <100.00%> (+0.02%)	⬆️

... and 39 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.