Reproducible builds

Sooo, after some careful fiddling around, I was able to make our release builds reproducible. Requires build-images!45 (merged).
I've updated curl to the latest version too, while I'm at it.
build-external stage is still flaky, I might need to re-run it manually, after this gets merged.