refuse deposit submissions that contains a single archive file (within the deposit archive)

As per T1122 we are receiving "malformed" deposits in the sense that the envelope archive only contains a single archive (zip, tar, etc.) which itself contains the source code. We should refuse those deposits and make their ingestion fail at the deposit check step.

---

Migrated from T1123 (view on Phabricator)