Accept a receive-pack tail that ends exactly at the drain limit

The drain budget reported overflow as soon as it was spent, without checking for EOF, so a clean response with exactly maxDrainBytes after the report skipped verification. Probe one byte at the limit.