repo_checker: store and compare build hash to skip more aggressively (similar check for project_only)

[jberry-suse]

• 95777e1:
  repo_checker: project_only place dashboard update behind dryrun check.

• b8d81e1:
  repo_checker: project_only ensure project repository is published.

• 9b7d121:
  repo_checker: store and compare build hash to skip more aggressively.

Fixes #973.
Fixes #1029.

[jberry-suse]

packagelists is rather under-powered for this bot and the addition of Leap:15.0 does not help. Effectively should skip re-reviewing stagings until their build changes. This should also allow the project_only mode to run without producing false-negatives during rebuilds. As such I will go ahead and enable it.

[jberry-suse]

The down-side of this is that if the whitelist is updated repo-checker will not recheck the staging.

[DimStar77]

For adi, there might also be changes in oS:F directly that alter the outcome of the check (think install deps were missing, then accepted through a different adi staging). The fact that setting confug won't be cinsidered for change/rescan is kinda a bummer

[jberry-suse]

This caches all relevant repos so it would detect that change. Basically all the repos it downloads to check it includes in the hash. If anything I just need to add config hash.

[jberry-suse]

Cleaned up code a tad so it can cache more, and included staging project meta revision in hash to detect config changes.

[jberry-suse]

For reference the last repo-checker run on packageslists:

• Oct 31 18:24:18
• Oct 31 23:39:33

Over 5 hours. I would expect this to drop that by 80% at least.

[coveralls]

Coverage decreased (-0.08%) to 31.179% when pulling 9aeb0a4 on jberry-suse:repo_checker-build-state into c32b59b on openSUSE:master.