package: move to compare version instead of timestamp

Use `rpm::Evr` crate to parse and compare `version` when checking
for update.

Inspired by Timothee's pointer:
#938 (comment)
Fixes: #933

Additional info:
Use rpm `0.16.1` instead of `0.17` as 1.84 does not support
feature `edition2024` that is requried by 0.17:
```
error: failed to parse manifest at `/root/.cargo/registry/src/
index.crates.io-6f17d22bba15001f/rpm-0.17.0/Cargo.toml`

Caused by:
  feature `edition2024` is required

  The package requires the Cargo feature called `edition2024`,
but that feature is not stabilized in this version of Cargo
(1.84.1 (66221abde 2024-11-19)).
```

Author: HuijingHei

Cargo.lock

@@ -41,6 +41,7 @@ openat-ext = ">= 0.2.2, < 0.3.0"
 openssl = "^0.10"
 os-release = "0.1.0"
 regex = "1.11.1"
+rpm = { version = "0.16.1", default-features = false }
 rustix = { version = "1.0.8", features = ["process", "fs"] }
 serde = { version = "^1.0", features = ["derive"] }
 serde_json = "^1.0"

Cargo.toml

@@ -232,8 +232,11 @@ pub(crate) fn update(name: &str, rootcxt: &RootContext) -> Result<ComponentUpdat
     let sysroot = &rootcxt.sysroot;
     let update = component.query_update(sysroot)?;
     let update = match update.as_ref() {
-        Some(p) if inst.meta.can_upgrade_to(p) => p,
-        _ => return Ok(ComponentUpdateResult::AtLatestVersion),
+        Some(p) => match inst.meta.can_upgrade_to(p) {
+            std::cmp::Ordering::Less => p, // current < available -> upgrade
+            _ => return Ok(ComponentUpdateResult::AtLatestVersion),
+        },
+        None => return Ok(ComponentUpdateResult::AtLatestVersion),
     };
 
     ensure_writable_boot()?;