gs-update-monitor: Fix security timestamp check

When there is no security update and the "security-timestamp" is a nonzero value, the code would download updates in error, while it should download only online updates.

Helps downstream bug https://bugzilla.redhat.com/show_bug.cgi?id=2239503