rmqa v0.1.1

Fixes from the independent review of 0.1.0.

• Archives are read as a stream: programs are kept in memory (at most
  512 MiB per archive) and everything else is only counted. A 1 MB archive
  that expands to 1 GiB used to take about 2.2 GB of memory; it now takes
  about 13 MB.
• A tar hard link is checked from the top of the archive, as tar resolves
  it, so a hard link to ../etc/passwd inside a folder is now unsafe-path.
• An archive made with tar -C dir . around one top folder no longer fails
  with archive-layout because of its ./ entry.
• The file name stored inside a .gz file gets the unsafe-path check.
• A program run with run that leaves a child process holding its output
  can no longer keep rmqa waiting past the 15-second limit.
• With --format github, a problem that stops the check is also printed as
  an annotation.
• The GitHub Action uses the x86-64 build on Windows on ARM runners and says
  so plainly when the download fails. CI now runs the action on Linux (x86-64
  and ARM64), macOS and Windows runners.