[KIP-932] Reject out-of-range AcquiredRecords in share fetch reply

[Kartik (sage-mode-hunter)]

A broker-supplied AcquiredRecords range in a ShareFetch response can overflow the per-entry ack-type buffer:

• rd_kafka_share_fetch_reply_handle_partition reads FirstOffset/LastOffset off the wire and computes size = LastOffset - FirstOffset + 1 as int64
• size is truncated to int32 for types_cnt in rd_kafka_share_ack_batch_entry_new, which allocates entry->types with the truncated count, while the loop that fills entry->types iterates the full int64 size
• a range wider than INT32_MAX (e.g. FirstOffset 0, LastOffset 2^32) allocates one element then writes 2^32 of them past it; a negative range (LastOffset < FirstOffset) is also accepted today

Guard the range before allocating, in line with the other broker-input validation in this parser.

[confluent-cla-assistant]

Please sign the Contributor License Agreement here before this PR can be approved.
❌ sage-mode-hunter
_{Please push an empty commit if you would like to re-run the checks to verify CLA status for all contributors.}