Keep the existing CZIPFile implementation

Summary

The proposed CZIPFile to minizip swap is declined.

Current main keeps the existing CZIPFile implementation for the small set of ZIP-driven workflows it already serves:

• local IP filter ZIP import
• downloaded IP filter ZIP extraction
• skin package ZIP installation

Why This Is Wont-Fix

• This is cleanup/substitution work, not a concrete correctness or security fix.
• The current ZIP surface is narrow and already integrated into existing flows.
• Replacing the reader would create avoidable churn in file-import paths for little practical hardening value.
• The branch direction favors low-drift stability work over dependency swaps in working code.

Disposition

• Marked Wont-Fix
• Keep CZIPFile in place
• If a future real ZIP bug appears, fix the bug directly or reopen the decision with concrete evidence rather than reviving this refactor by default