Update updater.py to also check for compressed versions of targets.txt

Also added a comment to make it obvious that referenced_metadata should always be release for delegated roles.