trackupstream: Do not simply fail if no pip-requires file is in tarball

Because of the filter we do when opening the tarball, there might be no
files found. This leads to $tar being undefined, and ultimately, a
crash.

Also, make sure the diff of pip-requires will always work, even when one
of the old or new tarballs don't exist.