Fix heap overflow in CopyDataAsFloatImpl by validating accessor bounds

[ztzat089-ctrl]

This PR fixes a heap buffer overflow (out-of-bounds read) in
CopyDataAsFloatImpl() in tiny_gltf_utils.h. The function did not
validate accessor.count, byte_stride, or buffer offsets before
reading data, which could allow reading beyond the allocated buffer
when processing a maliciously crafted glTF file.

This issue was reported to Google via the OSS VRP program
(Issue Tracker #543813782), and Google confirmed the vulnerability.
The fix adds bounds validation before the read.

Full test suite passes (425/425 tests).

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[ztzat089-ctrl]

Hello Google, please investigate and verify this vulnerability. Thank you very much.

[ztzat089-ctrl]

Hello Google, please investigate and verify this vulnerability. Thank you very much.