Add a custom extraction filter

[RKrahl]

Python 3.12 raises a warning:

DeprecationWarning: Python 3.14 will, by default, filter extracted tar archives and reject files or modify their metadata. Use the filter argument to control this behavior.

Background are tarfile extraction filters introduced with Python 3.12.

[RKrahl]

Should implement a custom extraction filter that refuses to extract certain items:

• device files,
• files with absolute path,
• files whose path would end up outside the destination directory,
• hard links to to absolute paths, or ones that link outside the destination.