devscript: add `list_url_attributes_on_file`

Uses OS X extended attributes (via `xattr`) to find the source
of a downloaded file.