Package repository: merge repo.xml

During synchronize, do not overwrite repo.xml, but merge it with the original one on the file system. This is required because we strip sensitive information (passwords) from the file before upload. This information has to be restored when synching the app back to the file system, otherwise we may end up with wrong permissions.