gs-appstream: Add missing consts

This doesn’t change the behaviour of the code, but does mean more stuff is correctly read-only in memory.

Signed-off-by: Philip Withnall withnall@endlessm.com