ng_decodeidname truncates u_long to ng_ID_t without range check

Summary

strtoul returns u_long(64-bit). ng_decodeidname(:919-925) only rejects ULONG_MAX and 0, casts to ng_ID_t(uint32_t). Value>0xFFFFFFFF silently truncated. Harmless: lookup miss only. Root-only.