fix: fix PNG chunk header bounds check in logo decoder

[Dollyerls]

Summary

decodePngPixels could read past the end of the buffer on a truncated or malformed PNG, silently corrupting the decode.

Problem

The chunk loop reads an 8-byte header — a 4-byte length followed by a 4-byte type (bytes[offset] through bytes[offset + 7]) — but the loop guard only guaranteed 4 bytes remained. Out-of-bounds Uint8Array reads return undefined, so the type field is decoded from garbage.

Change

Before	After
while (offset < bytes.length - 4) {	while (offset <= bytes.length - 8) {

offset <= bytes.length - 8 is the precise bound: it allows the last fully-present header (offset = length - 8, reading up to index length - 1) and rejects any position with fewer than 8 bytes left. Well-formed PNGs decode identically.

[vercel]

@Dollyerls is attempting to deploy a commit to the Tempo Team on Vercel.

A member of the Team first needs to authorize it.