Reject decompression-bomb config/metadata in KerasFileEditor (#23303)