Kura now refuses to serve truncated artifact files

To prevent silent data corruption, the artifact serving path now verifies the backing segment or blob file covers the declared range before streaming. If a file is shorter than expected, the read returns an error and is treated as stale during bootstrap, so nodes no longer get wedged by an incomplete, undecodable body.