Fix depends being checked/installed twice in bulk. Only check this in testport/bulk -t.

* This speeds up bulk builds while still allowing port testing to check
  for invalid dependencies.
* Refactor PKGENV so that it is only set during the 'package' phase as
  intended, to prevent the newly-built package from entering the repo
  with 'testport'