fix: use usize::try_from for footer_size casts to prevent silent truncation

Replace bare `footer_size as usize` casts with `usize::try_from(footer_size)`
to prevent silent truncation on 32-bit platforms where a positive i64 value
exceeding u32::MAX would wrap. Apply consistently across table.rs and
table_changes.rs to match the pattern already used in table_deletions.rs.

Author: zfarrell

src/table.rs

@@ -301,8 +301,9 @@ impl DuckLakeTable {
         );
         if let Some(footer_size) = delete_file.footer_size
             && footer_size > 0
+            && let Ok(hint) = usize::try_from(footer_size)
         {
-            pf = pf.with_metadata_size_hint(footer_size as usize);
+            pf = pf.with_metadata_size_hint(hint);
         }
 
         // Create file scan config for the delete file
@@ -372,8 +373,9 @@ impl DuckLakeTable {
                 // This reduces I/O from 2 reads to 1 read per file (especially beneficial for S3/MinIO)
                 if let Some(footer_size) = table_file.file.footer_size
                     && footer_size > 0
+                    && let Ok(hint) = usize::try_from(footer_size)
                 {
-                    pf = pf.with_metadata_size_hint(footer_size as usize);
+                    pf = pf.with_metadata_size_hint(hint);
                 }
 
                 Ok(pf)
@@ -452,8 +454,9 @@ impl DuckLakeTable {
         );
         if let Some(footer_size) = table_file.file.footer_size
             && footer_size > 0
+            && let Ok(hint) = usize::try_from(footer_size)
         {
-            pf = pf.with_metadata_size_hint(footer_size as usize);
+            pf = pf.with_metadata_size_hint(hint);
         }
 
         // Use read_schema (with original Parquet names) for reading

src/table_changes.rs

@@ -440,7 +440,8 @@ impl TableChangesTable {
             &self.table_path,
             &data_file.path,
             data_file.path_is_relative,
-        );
+        )
+        .map_err(|e| DataFusionError::External(Box::new(e)))?;
 
         // Create PartitionedFile with footer size hint if available
         let mut pf = PartitionedFile::new(
@@ -449,8 +450,9 @@ impl TableChangesTable {
         );
         if let Some(footer_size) = data_file.footer_size
             && footer_size > 0
+            && let Ok(hint) = usize::try_from(footer_size)
         {
-            pf = pf.with_metadata_size_hint(footer_size as usize);
+            pf = pf.with_metadata_size_hint(hint);
         }
 
         // Determine what to read from Parquet
@@ -562,7 +564,8 @@ impl TableProvider for TableChangesTable {
                     &self.table_path,
                     &data_file.path,
                     data_file.path_is_relative,
-                );
+                )
+                .map_err(|e| DataFusionError::External(Box::new(e)))?;
                 builder.add_file(&resolved_path, data_file.encryption_key.as_deref());
             }
             let factory = builder.build();