`decode_body`: URLs with `.tar.gz` and content-type `application/x-tar`

[wojtekmach]

Currently they'd be treated as tar, they should ideally be treated as tgz. Need to double-check if application/x-tar content-type would allow that though.

Perhaps the URL is irrelevant and we look for magic bytes.