Keep the app source archive with the app instance data dir

src/apps.js

@@ -1486,6 +1486,11 @@ async function install(data, auditSource) {
     const appId = crypto.randomUUID();
     debug(`Installing app ${appId}`);
 
+    // if we have a sourceArchive rename it to appId to be picked up later in the apptask
+    if (data.sourceArchiveFilePath) {
+        if (!safe.fs.renameSync(data.sourceArchiveFilePath, `/tmp/${appId}.tar.gz`)) throw new BoxError(BoxError.FS_ERROR, 'Error moving source archive');
+    }
+
     const app = {
         accessRestriction,
         operators,