Use zip instead of cipo

cpio fails with checksums.

Signed-off-by: Fabian Deutsch <fabiand@fedoraproject.org>