wrong Debian orig archive is selected by *match commands when there is more than one orig archive

found an issue with a4f *matcher commands.

It may happen that a debian package has multiple orig archives, like here:

a4f *match does not pick the "right" one (the one ending with .orig.tar.gz) but another one, and unpacks it

The contents are those of freetype_2.10-1-orig-ft2demos.tar.gz

So the wrong archive gets scanned, leading to inconsistent data and errors in the next steps, so no spdx file can be finally uploaded to fossology