Add a ZipScanner, which scans zip files without extraction

This won't support any checks that assume the path lives on a
real filesystem, e.g. phpcs & clamav
Return if we can't open the zip
Use $zip->getFromIndex
Merge pull request #128 from ehg/zip-scanner

Add a ZipScanner, which scans zip files without extraction