Improve documentation of oscap_source and ds_sds_session.
Remove TODO that no longer applies

The oscap_source originated from DataStream is currently known as
OSCAP_SRC_FROM_EXPORT_XML_DOM, the internal temp files do not need
to be handled explicitly.
Rename private constant to better reflect its use.