audit pub visibility across zb_io

Most types and functions are pub because the modules are pub mod. Internal helpers like entry_path, has_entry, extraction internals are all publicly accessible. No clear API boundary.

Mark internals pub(crate), define the intended public surface in lib.rs.

Part of #293