V3 deterministic ZIP archive capability pack. By-value connector composition (service_kind=cli, no separate ingredient): the local unzip CLI exposes readiness, archive listing, verbose metadata listing, CRC integrity testing, and extraction of one requested ZIP entry into an engine-managed output directory. Read operations are path-based because member names, metadata, and test diagnostics are stdout value output. Extraction materializes the source ZIP and writes only under an engine-managed output directory, while -j strips archive paths from the extracted filename. Fixed-function and reproducible: no recursive all-entry extraction, overwrite target, password, text conversion, archive mutation, wildcard expansion knobs, caller-chosen filesystem target, or arbitrary unzip flags. Requires unzip on PATH (Debian/Ubuntu: apt install unzip; macOS: unzip is commonly installed with system tools). Local and no-egress.