Fix archive validation.

The tar Header.Name (for example with gnu tar) can start with ./ (for example ./app and ./rootfs/).
Use filepath.Clean and use the cleaned up name. This also makes the logic similar to
ValidateLayout().