How ICNS is handled
- The container length and bounded chunk table are validated locally before decoding.
- Only embedded static PNG representations inside the safe pixel limits are candidates.
- The largest pixel area wins; payload size and original order provide deterministic tie-breaking.