rollback xz to 5.4.6

Signed-off-by: Jason Hall <jason@chainguard.dev>

xz.yaml

@@ -1,6 +1,6 @@
 package:
   name: xz
-  version: 5.6.1
+  version: 5.4.6
   epoch: 0
   description: "Library and CLI tools for XZ and LZMA compressed files"
   copyright:
@@ -18,7 +18,7 @@ pipeline:
   - uses: fetch # use fetch instead of git-checkout else there is a circular dependency with git
     with:
       uri: https://github.com/tukaani-project/xz/releases/download/v${{package.version}}/xz-${{package.version}}.tar.gz
-      expected-sha256: 2398f4a8e53345325f44bdd9f0cc7401bd9025d736c6d43b372f4dea77bf75b8
+      expected-sha256: aeba3e03bf8140ddedf62a0a367158340520f6b384f75ca6045ccc6c0d43fd5c
 
   - name: Configure
     runs: |