osbuild manifest's urls should now contain a url and any secrets. The secrets should contain a name.
This represents the sources objects, for now only org.osbuild.files is supported. Signed-off-by: Tom Gundersen <teg@jklm.no>