fix: ensure reinstall when other install touch sandbox but still not write to manifest.

[SolaWing]

this patch by touch a mark file before install, and delete when save manifest, to ensure if install cancel, the touched source will be reinstall.

closes: #9128

[segiddins]

Why does this need to write to disk? Could the standbox store this information in a hash?

[SolaWing]

write to disk is to ensure when cancel and reinstall, the touched pod can be detect. if only store in memory hash, this information is lost after cancel

[xuzhongping]

@SolaWing Hi,this looks great, but doesn't seem to take into account the 'external' pods, the current processing is for 'release' pods,consider fixing that part too?

[SolaWing]

@xuzhongping good point, I add the external donwload check in analyzer