archive-processor should process files atomically

[hut8]

If the processor crashes, an incomplete gzip is left in the output directory. That stops the rest of the archive from being processed on the next invocation, because if the file is in the destination directory and not empty, it thinks it's done.

The output archive should be written to a temporary file, then moved atomically to the destination.