Added a requirement metadata.xml

Updated the CAA spec to be explicit about the metadata we store for each release -- namely the output of a call to our WS.