[format] Validate ORC stripe metadata before reading

[ArnavBalyan]

Purpose

• Paimon reads ORC offset and length metadata without validating values.
• Malformed stripe metadata can cause read failure due to invalid memory access/out of bound exception.
• Port ORC-2200 to ensure a clean fix exists on Paimon side.

Tests

• UT

[JingsongLi]

Requirement fit: SUPPORTED. Implementation: CLEAN.

Reviewed e850bb151966. The validation is on the actual ORC stripe-read path, before the footer read/allocation. Rejecting negative, overflowing and out-of-file metadata has practical failure-containment value. The checks are consistent with the upstream ORC-2200 change (apache/orc#2683).

Validation: compiled the changed Java code against cached dependencies and ran RecordReaderImplTest (2 passed). Current head CI is green. A malformed-file round trip through Paimon was not run locally.

No actionable implementation regression found in this review.