[Aikido] Fix security issue in tar via minor version upgrade from 0.4.44 to 0.4.45

[aikido-autofix]

Upgrade tar to fix PAX header parsing inconsistency (CVE-2026-33055) and symlink-based arbitrary directory permission modification (CVE-2026-33056).

✅ 2 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2026-33055	HIGH	[tar] A tar archive parsing vulnerability where the library incorrectly ignores PAX size headers when base headers are nonzero, allowing attackers to create archives that unpack differently across parsers and potentially leading to file extraction inconsistencies or security bypasses.
CVE-2026-33056	MEDIUM	[tar] A symlink-following vulnerability in the unpack function allows attackers to modify permissions of arbitrary directories outside the extraction root by crafting tarballs with symlink entries followed by directory entries with identical names.

🔗 Related Tasks

• Small upgrade for tar #21

[github-actions]

Automated review unavailable (Claude step failed). Please review manually.

[sentry]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!