fix: pass the upper buffer to the codec's validate_layout

`validate_layout` now takes the upper buffer and checks its size, so
pass it from the array's validation.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: rapour <reza.apour@gmail.com>

Author: rapour

encodings/elias-fano/src/array.rs

@@ -636,12 +636,13 @@ fn validate_parts(
     );
 
     // Everything below is codec geometry, re-derived from `(span, n)` alone: the widths, the upper
-    // length, both sample counts, and every sample's range and order.
+    // length and buffer size, both sample counts, and every sample's range and order.
     ef::validate_layout(
         data.span(),
         lower.len(),
         data.lower_width(),
         data.upper_len(),
+        data.upper_buffer().as_slice(),
         data.samples_buffer().as_slice(),
     )
     .map_err(malformed)