update get-sources.sh, add sync-sources.sh

Run sync-sources.sh first, if you ensure that the tarballs are the latest.