feat: add bounded Quantum cabinet extraction

tests/release-archive.test.ts

@@ -74,6 +74,7 @@ describe('release archive', () => {
       expect.arrayContaining([
         'LICENSE',
         'LICENSES/AGPL-3.0.txt',
+        'LICENSES/compcol-MIT.txt',
         'LICENSES/MPL-2.0.txt',
         'LICENSES/THIRD-PARTY-LICENSES.txt',
         'LICENSES/lzxd-MIT.txt',
@@ -94,6 +95,11 @@ describe('release archive', () => {
     expect(
       createHash('sha256').update(files['LICENSES/lzxd-MIT.txt']!).digest('hex')
     ).toBe('c7a1dcbf839b1dfb72f24e1de12ab55f789db2c61d894ca9aa8b5f595490d9ca');
+    expect(
+      createHash('sha256')
+        .update(files['LICENSES/compcol-MIT.txt']!)
+        .digest('hex')
+    ).toBe('a7009ce74b33a2afcf9ab38007bf3c8f5020d9b816dc5fc7296bf17e6d7dc796');
     expect(
       files['LICENSES/THIRD-PARTY-LICENSES.txt']!.toString('utf8')
     ).toContain('fflate@0.8.3');