Constant MAX_DECOMPRESSED_REMOTE_CACHE_BYTES 

pub const MAX_DECOMPRESSED_REMOTE_CACHE_BYTES: u64 = _; // 1_073_741_824u64

Decompressed-size ceiling for decompress_payload zstd payloads. Bounds the allocation a malicious or corrupted zstd payload from the GHA cache service can force, since zstd compresses pathologically well on repeated bytes (a few-KiB compressed blob can decompress to gigabytes). 1 GiB covers any realistic cache entry — bzImage is ~15 MiB, stripped vmlinux ~45 MiB, an unstripped debug vmlinux with BTF can reach ~500 MiB — while bounding worst-case allocation against hostile zstd payloads. Public so a downstream consumer can size buffers against the same ceiling without hardcoding the value.