v0.10.0

This release addresses issues raised in GHSA-63p2-3674-32xw. If you are decrypting untrusted backups, you should update to v0.10.0.

Changelog:

• Prevent directory traversal attacks caused by malicious Manifest.db file names and file IDs.
• Prevent resource exhaustion from malicious keybag PBKDF2 iteration counts or unexpectedly large file blobs in Manifest.db.
• Always raise an error on decrypted files with unexpected or invalid padding formats.
• Refactor utils.aes_decrypt_chunked to move separate decryption logic from backup logic. This is a breaking change to the method signature.
• Alter the messaging on mismatch between decrypted filesize and Manifest.db recorded filesize. (This is a well-known issue mostly seen on SQLite files, e.g. mvt-project/mvt#316).

v0.9.0...v0.10.0