Ensure tar extraction compatibility with python 3.14

[lancetarn]

Tar extraction defaults will change in a breaking way in 3.14. We should be certain that the core agent tar does not do anything unexpected, and set the most restrictive filter we can (hopefully filter=data but the presence of executable might mean filter=tar is the limit) in the call to extractall()