windows: use snprintf instead of sprintf in Packages.cpp

Bounds-safe formatting into the fixed-size libraryName buffers.
Mirrors upstream PR #160 (sprintf -> snprintf), without the
unbuildable gtest file from that PR.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>