Improve the tarball format checks on package upload

It's more comprehensive and should now give rather more helpful error
messages, especially for the common case of using GNU tar format
(fixes #171).

Also include a check on timestamps being in the future (fixes #159).