[gvar] Use hb_bytes_t.check_range instead having in house one And use TupleVarHeader calculated size for validity check. Fixes https://crbug.com/oss-fuzz/20919 and possibly other gvar related issues