fwupd and xz metadata

Adding support for zstd is a fine move. None of this should be interpreted like that first comment of being due to "xz having a smell" about it. That is FUD, and this same kind of situation could happen to countless projects.