Expand SDK archive tests to validate file permissions, ownership, and structure

Following the work in #52910 to produce Windows archive tarballs and validate deduplication links, we should expand the `GivenSdkArchives` tests to cover additional archive properties.

## File permissions
- Verify that `tar.gz` archives preserve executable permissions (e.g., `dotnet`, `apphost` binaries should have the execute bit set after extraction)
- Verify that non-executable files (e.g., `.dll`, `.json`) do *not* have the execute bit set

## Archive structure
- Verify expected top-level directory structure exists (e.g., `sdk/`, `host/`, `shared/`)
- Verify no path traversal entries exist (paths containing `../`)

## File ownership (tar metadata)
- Verify tar entries have reasonable owner/group values (not root-owned when created on CI, or vice versa)