Make api_raw_extrinsic_metadata_get set Content-disposition

So metadata files are always downloaded as attachment (when accessed from a browser),
and has a filename that contains the SWHID of the metadata target.