fn parse_header(header: &Value) -> Result<Vec<Cid>, CarError>
Reads the roots out of a decoded header, and refuses everything else.