nit: it feels like a (pre-existing) mistake to not track `BUILDSYS_SOURCES_DIR` if we are tracking `BUILDSYS_PACKAGES_DIR` - if we override the build to point to a completely different sources tree then that should invalidate any builds that used those sources.