#1263 Upgrade Tycho 4.0.9 to 5.0.0

Best to review per commit. No end-user visible changes.

Changes:

• DEPENDENCIES.txt has less source bundles and less duplicate entries.
• Got rid of source features. There is no need to build source features for features. We do still build source bundles for plugins. Our update site already has includeAllSources configured, and hence our update site still contains source bundles. When installing bundles, P2 will install sources for them (if asked).
• Added a build launch configuration variant to build without using Develocity caches, for easier build output comparisons.

Notes:

• There are four new warnings for direct-from-Maven dependencies, indicating that they are hashed using sha-1. I checked the latest versions of these dependencies, and they are still hashed with sha-1 on Maven Central. The only exception is JavaBDD, which has both sha-1 and newer sha hashes, but still gets reported. Hence, we can't get rid of these new warnings. These new warnings are next to the only other warnings we already had, the ones relating to No digest algorithm is available to verify download for direct-from-Maven dependencies.

Closes #1263 (closed)