add xmltooling for stretch-pu

Note that the version is not yet fixed, it is discussed if this should
be just the security-fix on top of stable version or it can be 1.6.3-1
backported to stretch.