Inspect decoded report archives instead of their base64 text
Known embedded archives need the same inspection boundary as standalone archives. Scanning base64-compressed data as literal text can both invent credential-shaped matches and miss sensitive decoded contents. Validate the packaging, decode under existing archive limits, scan surr…