remote source plugin can introduce non-determinism

Summary

Similarly to #527 (closed), and discussed already here !581 (comment 91185598) and in following comments, the remote source will store a downloaded file locally in the source cache, which it will later stage; without ensuring that the mode bits of the file are deterministic, even though the mode of the file itself is dependent on the user's umask.