integration: automatically collect versions / shas of related binaries

[knz]

For reproducibility it's important to collect build info. This probably needs two things:

• syntax extension to list involved programs/binaries
• collect the data in the report