`shutil.move` usage in xbstrap deposit_artifact implementation could make some artifacts temporarily unreadable

... because it appears to not use the old "temporary file + rename" link, so there is a time during which the file is a truncated version of the artifact being deposited