Have all modules point to either github/debian archives for tarballs

[tlaurion]

Heads had several build breakages in the past because repositories go either down, have certificate problems etc.

Pointing to github releases or Debian archives would mitigate this issue for reproducibility in the future. Neither of those should have either cert/DNS issues that go unnoticed.

Those may require checksums update, though under modules, as opposed to bouncing packages from mirror to mirrors like we do from time to time. But building an old Heads commit after that change should be possible as long as the recipes from CircleCI are respected to have the same docker image (OS version) and installed packages.

Edit: Need arose at https://github.com/osresearch/heads/pull/1188#issuecomment-1203239597