Fix code scanning alert no. 2: Arbitrary file access during archive e…

…xtraction ("Zip Slip")

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

internal/config/icons.go

@@ -69,6 +69,10 @@ func unzipFile(src, dest string) error {
 	defer reader.Close()
 
 	for _, file := range reader.File {
+		if strings.Contains(file.Name, "..") {
+			log.Warn().Str("file", file.Name).Msg("skipping file with invalid path")
+			continue
+		}
 		path := filepath.Join(dest, file.Name)
 		if file.FileInfo().IsDir() {
 			os.MkdirAll(path, os.ModePerm)