Harden against empty metadata YAML files

I'm not entirely sure yet how those occur, but once you have one the system never recovers from it. Seems binary factory is affected by this right now.

A possible explanation might be the unguarded parallel generation of the same meta data two or more times (one for each arch, plus whatever differently named obsolete files for the same package are still around), but I have no proof for that.