roy build -nocontainer: an empty container matcher still runs

[richardlehane]

When a signature file is built with -nocontainer flag, the container matcher should be skipped entirely if it is empty. At the moment it is running (i.e. unpacking zip and mscfb files, but then having no signatures to match against).