introduce SourceRpm subclass of Sut

Begin reworking software-under-test as per
http://lists.fedoraproject.org/pipermail/devel/2013-January/176715.html

Also: make the <hash> element optional within a <file>

Finally, ensure that the generated XML validates within the selftests
(motivating the above fixes)