validateOutputArchive()
The tar file from the `osbuild-worker-executor` is potentially tainted. Ensure we validate and only extract if it harmless.