cafdec: allow larger ALAC magic cookie

It already skips any extra bytes at the end, and apparently there are some
samples in the wild with larger 'kuki' chunks.