fix: handle panics in package analysis (#1134)

### PR Checklist

- [x] The PR title follows
[conventional commits](https://www.conventionalcommits.org/en/v1.0.0/)
- [ ] Is this closing an open issue? If so, link it, else include a
proper
      description of the changes and rason behind them.
- [ ] Does the PR have changes to the frontend? If so, include
screenshots or a
      recording of the changes.
<br/>If it affect colors, please include screenshots/recording in both
      light and dark mode.
- [ ] Does the PR have changes to the backend? If so, make sure tests
are added.
<br/>And if changing dababase queries, be sure you have ran `sqlx
prepare`
      and committed the changes in the `.sqlx` directory.

Author: stainless-em

api/src/tarball.rs

@@ -300,7 +300,7 @@ pub async fn process_tarball(
     )
   })
   .await
-  .unwrap()?;
+  .map_err(|e| PublishError::UnexpectedError(format!("{:?}", e)))??;
 
   // ensure all of the JSR dependencies are resolvable
   for (kind, req) in dependencies.iter() {
@@ -612,6 +612,9 @@ pub enum PublishError {
     ScopedPackageNameValidateError,
   ),
 
+  #[error("unexpected error: {0}")]
+  UnexpectedError(String),
+
   #[error("unresolvable 'jsr:' dependency: '{0}', no published version matches the constraint")]
   UnresolvableJsrDependency(PackageReq),
 
@@ -632,6 +635,7 @@ impl PublishError {
       PublishError::GcsUploadError(_) => None,
       PublishError::MissingTarball => None,
       PublishError::DatabaseError(_) => None,
+      PublishError::UnexpectedError(_) => None,
       PublishError::InvalidTarball(_) => Some("invalidTarball"),
       PublishError::LinkInTarball { .. } => Some("linkInTarball"),
       PublishError::InvalidEntryType { .. } => Some("invalidEntryType"),