Fix Snefru size validation

[marko1olo]

Fixes #2509.

Summary

• validate Snefru size before passing it to crypto-api
• reject negative sizes with a controlled OperationError instead of an uncaught RangeError or empty output
• lower the operation metadata max from 480 to 448, because the current implementation also throws at 480
• add regression coverage for the reported negative boundary and the previous exposed max

Checks

• node --no-warnings --no-deprecation --openssl-legacy-provider tests/operations/index.mjs -> 1962 passing
• npx eslint src/core/operations/Snefru.mjs tests/operations/tests/Hash.mjs
• npx grunt configTests
• git diff --check

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-actions]

As we are unable to accept contributions unless the CLA has been signed, this PR will be automatically closed if the CLA is not signed within 21 days.