+htp #16516 rewrite Deflate/GzipDecompressor as StatefulStage to defuse zip bomb

Also, the tests have been DRY'd up.
+htp #16516 allow setting maximum ByteString chunk size for decoding operations