[woodruffw]

Match on the member's extension format once. For PAX, check each positioned extension in archive order. For a forbidden GNU member, report the earliest long-name or long-link header, falling back to the member header when it has neither.

The metadata integration tests exercise two cases where order matters. A forbidden global PAX header precedes a forbidden local vendor record, and a GNU long-link header precedes a long-name header.

Ran cargo test --locked -p tar-codec --test members --test metadata.

[codspeed]

Merging this PR will not alter performance

✅ 28 untouched benchmarks
⏩ 8 skipped benchmarks¹

---

_{Comparing ww/check-member-policy (5bb5d5d) with ww/logical-test-cleanup (590ae80)}

Footnotes

1. 8 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩