Off-by-One Buffer Overflow in SMB Path Handler

Found an off-by-one buffer overflow in `lib/smb.c` when handling SMB file paths. The bounds check uses `>` instead of `>=`, allowing a path of exactly 1023 bytes to overflow the 1024-byte buffer by one byte when the null terminator is added.

struct smb_nt_create {
    // ... other fields ...
    char bytes[1024];  // fixed size buffer
} PACK;

static CURLcode smb_send_open(...) {
    struct smb_nt_create msg;
    const size_t byte_count = strlen(req->path) + 1;
    
    if(byte_count > sizeof(msg.bytes))  // Wrong: should be >= …