Stream an entry's expanded bytes with an incremental cap. CRC verification
for the streaming path is the CALLER's job via crc32/crc32Final (the plate
pipeline verifies at end-of-stream); extractEntry() verifies internally. cap must be a non-negative
integer, else E_CONTAINER_OPTION. budget charges the archive-wide total per chunk, like cap does
per entry.
Optionalbudget: ExpansionBudget
@chestnutlabs/gcode-containers — safe container extraction (DD-005 §4.4/§7).
Phase 2 (#74): the hardened in-memory ZIP reader and the
.gcode.3mfadapter. In-memory only, zero dependencies, never writes files, never fetches. Depends only on @chestnutlabs/toolpath-core; the parser consumes it through its structural ContainerAdapterLike type (worker entries compose).