Most of these updates is based on data from https://repology.org/,
detection based on permanent redirect from http:// to https://.

$source urls are updated when they contain $url as substring.

(CVE-2016-6263, CVE-2015-8948, CVE-2016-6262, CVE-2016-6261)

Since abuild v2.22.0, these are removed automatically unless 'libtool'
option has been specified.

this is needed for apk-tools-2.1 migration

Busybox got static in 3860ada6 causing
fakeroot to break and owners got bad in all packages built after that.

This got fixed in 7f3e9891 but all broken
packages needs to be rebuilt.

fixes #387

ref #384

and fixed misc build issues