Move BULK_COOKIE for package to the redirector, so that we do not clean in subpackage cases, but instead wait for all the packages to be built. Also, introduce FORCE_UPDATE=hard: with signatures, -F installed is most often not necessary...