Remove intermediate exception in Formula#system

Now that ErrorDuringExecution is only raised in one place, we can just
raise the BuildError directly instead.