Validate string-table offsets and bound section name reads using
configurable per-name and aggregate limits. Fall back to header names
with one warning when names are invalid or exceed a limit. Allow -1
to disable each limit.

Always resolve names of eight bytes or fewer, including .reloc, to
preserve relocation handling.