fix: cap region and external chunk file reads in the entity scan

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: ryanbarlow97

src/main/java/net/tfminecraft/cooking/husbandry/HusbandryEntityScan.java

@@ -29,9 +29,10 @@ record Found(String world, int x, int y, int z) {}
     /** {@code complete} is false when some chunk could not be read, so a missing animal may still exist. */
     record Result(Map<UUID, Found> found, boolean complete) {}
 
-    private static final Pattern REGION = Pattern.compile("r\\.(-?\\d+)\\.(-?\\d+)\\.mca");
+    private static final Pattern REGION = Pattern.compile("r\\.(-?\\d{1,7})\\.(-?\\d{1,7})\\.mca");
     private static final int SECTOR = 4096;
     private static final int MAX_CHUNK_BYTES = 32 * 1024 * 1024;
+    private static final int MAX_REGION_BYTES = 256 * 1024 * 1024;
 
     private HusbandryEntityScan() {}
 
@@ -67,7 +68,7 @@ private static boolean scanRegion(
             WorldDir world, File file, int regionX, int regionZ, Set<UUID> targets, Map<UUID, Found> found) {
         byte[] data;
         try {
-            data = Files.readAllBytes(file.toPath());
+            data = readBounded(file, MAX_REGION_BYTES);
         } catch (IOException ex) {
             return false;
         }
@@ -108,7 +109,7 @@ private static byte[] chunkBytes(WorldDir world, byte[] data, int offset, int ch
         byte[] raw;
         if ((compression & 0x80) != 0) {
             compression &= 0x7F;
-            raw = Files.readAllBytes(new File(world.entities(), "c." + chunkX + "." + chunkZ + ".mcc").toPath());
+            raw = readBounded(new File(world.entities(), "c." + chunkX + "." + chunkZ + ".mcc"), MAX_CHUNK_BYTES);
         } else {
             if (length < 1 || offset + 4 + length > data.length) {
                 return null;
@@ -134,6 +135,16 @@ private static byte[] chunkBytes(WorldDir world, byte[] data, int offset, int ch
         }
     }
 
+    private static byte[] readBounded(File file, int max) throws IOException {
+        try (InputStream in = Files.newInputStream(file.toPath())) {
+            byte[] data = in.readNBytes(max + 1);
+            if (data.length > max) {
+                throw new IOException(file.getName() + " is larger than " + max + " bytes");
+            }
+            return data;
+        }
+    }
+
     private static int readInt(byte[] data, int at) {
         return ((data[at] & 0xFF) << 24) | ((data[at + 1] & 0xFF) << 16)
                 | ((data[at + 2] & 0xFF) << 8) | (data[at + 3] & 0xFF);