[SPARK-57962][PYTHON] Guard against path traversal in install_spark tar extraction