Fix: GHSA-3ppc-4f35-3m26
Backport-Of: 2e111f3

This limits the levels of recursion allowed when encountering multiple
non-adjacent `**` portions of a pattern.

Update `**` handling, with performance massively improved by limiting
the recursive walk much more aggressively. When a `**` portion is
present, the entire pattern is split up into sections. The head and tail
first have to match, and then each subsequent portion is only tested in
the part of the file where it might actually be found, taking advantage
of the fact that non-globstar portions must always consume as many path
portions as there are pattern portions.

Fix: GHSA-7r86-cg39-jmmj

Backported 0bf499a to v3

Fix: #284

Backport of 3a0d83b to v4