Break down the update.scan_apk() method into smaller pieces

The idea of this MR is that consumers of fdroidserver as a library (such as repomaker) can scan APKs without the APK file needing to exist in an actual repository context.

Also smaller methods help with code encapsulation, are easier to unit test and usually make the code easier to maintain as well.