Fix tar path traversal through symlinks

[wagoodman]

There are already protections in place to prevent writing files outside of the unarchive directory. This PR extends these protections to include symlink destinations; if a symlink points to a location outside of the unarchive destination then this will now result in an error. This covers two cases:

• when there is symlink destination that is a relative path pointing outside of the unarchive destination
• when there is symlink destination that is an absolute path existing outside of the unarchive destination

This patches CVE-2024-0406.