[Enhancement] ZIP archive inspection and safe selective extraction #7

Priority: P2
Parent roadmap: #1

Goal

Complement Tuck's Create ZIP Archive with fast inspect contents and extract selected entries capabilities, without requiring a full archive-management app.

Scope

• Contextual ZIP action to display a searchable, sortable entry list with paths, compressed/original sizes, timestamps and types.
• Extract All to a collision-safe named folder; Extract Selected… entries to a chosen directory. Maintain nested directory structure.
• Support widely compatible ZIP methods; detect and clearly report unsupported methods and encrypted/password-protected entries. Never pretend .7z is a regular .zip.
• Prevent Zip Slip (absolute/../ paths), symlink traversal, archive bombs, extreme expansion ratios, duplicate/ambiguous names and overwrite attacks.
• Preserve standard content/timestamps/permissions when safe; handle Unix symlinks and macOS metadata cautiously.
• Show progress/cancel and reveal created output; queue multiple archives through [Phase 3] Background operation center: queue, progress, cancellation, and retry #4 when available.

Acceptance criteria

• Existing ZIP creation still outputs standard Deflate ZIP and extracts successfully with Archive Utility.
• Preview does not extract entire archives to internal storage or execute code from entries.
• Selected entries extract with correct bytes; collisions require safe name resolution/confirmation.
• Malicious/malformed archives cannot write outside destination or damage pre-existing files.
• Encrypted/unsupported archives produce explicit guidance.

Tests

Round trips with nested Unicode paths, empty folders, large archives, symlinks, hidden resource forks, zip bombs (bounded fixtures), path traversal and name conflicts. No destructive cleanup outside job-owned scratch.