Defang zip bombs and add storage consumption handling

[Karl Mutch]

As a user
I want to have storage limits enforced on staged artifacts
In order that zip bombs are disabled and storage is constrained within requested limits

[Karl Mutch]

Affected areas are

 > internal/runner/localstorage.go:146
 ╷

146│ _, errGo = io.Copy(file, tarReader)
╵
= Detected a possible denial-of-service via a zip bomb attack. By limiting
the max bytes read, you can mitigate this attack. io.CopyN() can
specify a size. Refer to https://bomb.codes/ to learn more about this
attack and other ways to mitigate it.

go.lang.security.decompression_bomb.potential-dos-via-decompression-bomb
> internal/s3/s3.go:454
╷
454│ _, errGo = io.Copy(file, tarReader)
╵
= Detected a possible denial-of-service via a zip bomb attack. By limiting
the max bytes read, you can mitigate this attack. io.CopyN() can
specify a size. Refer to https://bomb.codes/ to learn more about this
attack and other ways to mitigate it.