feat(backport): Use Python 3.12+ tarfile data extraction filter

[meeseeksmachine]

Backport PR #2455: feat: Use Python 3.12+ tarfile data extraction filter

* Backport PR https://github.com/scikit-hep/pyhf/pull/2455
* In Python 3.12 extraction filters are added and will become default in
  Python 3.14. To start using them for when Python 3.12 support is added, and
  to guard against a Python 3.14 DeprecationWarning, use the data extraction
  filter for extracting tarfiles in pyhf.contrib.utils.download.
   - c.f. https://docs.python.org/3.12/library/tarfile.html#extraction-filters

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (release/v0.7.x@71b87eb). Learn more about missing BASE report.

Additional details and impacted files

@@                Coverage Diff                @@
##             release/v0.7.x    #2500   +/-   ##
=================================================
  Coverage                  ?   98.19%           
=================================================
  Files                     ?       69           
  Lines                     ?     4547           
  Branches                  ?      804           
=================================================
  Hits                      ?     4465           
  Misses                    ?       49           
  Partials                  ?       33           

Flag	Coverage Δ
contrib	97.73% <33.33%> (?)
doctest	98.02% <33.33%> (?)
unittests-3.10	96.19% <33.33%> (?)
unittests-3.11	96.19% <33.33%> (?)
unittests-3.12	96.19% <33.33%> (?)
unittests-3.7	96.17% <33.33%> (?)
unittests-3.8	96.21% <33.33%> (?)
unittests-3.9	96.23% <33.33%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.