CLSA-2026-1792628290 openexr: Fix of 11 CVEs

CVE-2026-54920: validate the data window and pre-initialise every level pointer in OpenEXRUtil Image::resize, so an overflowing level size no longer leaves clearLevels deleting uninitialised ImageLevel pointers - CVE-2026-55059: map the row index with dataWindow.min.y instead of min.x in...