* Don't "externalize url/rev/sha256 to permit easier override".
Just override 'src' itself. Then you can get the source from anywhere,
not just git. I needed to touch this anyway, because I want to use
fetchzip instead of fetchgit for releases (no need to clone repo).
* Latest release has "make install" improvements, simplifying our
install.