6e1b018adb
- treat `\` as a separator in safe_relative so `\abs` and `..\..\x` are refused - read zip symlink targets with `unzip -p` off the `unzip -Z -l` listing and reject escapes before unpacking