fix: malicious or compromised PAM module can DOS sudo-rs via num_msg=-1

[Pingasmaster]

trafficstars

Fix the problem by throwing an error if the number is negative or unexpected, added a test too. This is a suggestion only.

Thread: https://github.com/trifectatechfoundation/sudo-rs/issues/1311