Decode() can read past the end of the slice

[dgryski]

The Go code always does a uint32 read, which if the last number is only a single can can read past the end of the slice.

The SSE code always reads 16 bytes past the initial header byte before shuffling the numbers appropriate.

These should be documented as least.