Wget HTML extension rewrite can overrun resized filename buffer

In wget's HTTP save path, add_html_extension() grows hs->local_file by a heuristic amount and then appends an extension and optional numeric disambiguator with strcpy/sprintf into the tail of the same buffer.