[api][backend] rework Download on Demand feature

WARNING: still a remote root leak with chroot workers

WARNING: this is incompatible to expermintal DoD function in OBS 2.5 and before