Use PyPI mtimes for source dates

- PyPI sdists can reuse reproducible archive mtimes across releases.
- That left Python bytecode caches looking fresh after dependency bumps.
- Use PyPI `Last-Modified` metadata for newer bottle source times.