libpdq 0.2.2 — memory safety fixes

Fix signed-int overflow in Jarosz/decimate indexing for very large
inputs and add explicit size_t multiplication overflow guards.
No algorithmic changes; output unchanged from 0.2.1.