Fix code scanning alert no. 61: Arbitrary file access during archive extraction ("Zip Slip")

[lfoppiano]

Fixes https://github.com/kermitt2/grobid/security/code-scanning/61

To fix the problem, we need to ensure that the output paths constructed from zip archive entries are validated to prevent writing files to unexpected locations. This can be done by verifying that the normalized full path of the output file starts with a prefix that matches the destination directory. We will use java.nio.file.Path for path normalization and prefix checking.

1. Normalize the path of the file to be created.
2. Check if the normalized path starts with the destination directory path.
3. If the check fails, throw an exception to prevent writing the file.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[coveralls]

coverage: 40.829% (-0.006%) from 40.835%
when pulling 2cc090f on alert-autofix-61
into 7c0bccf on master.

[lfoppiano]

This is not a real issue because the problematic code is from the main class. No impact whatsoever.