Create source archives by running 'setup sdist --output-directory'.

Fixes #403.
Don't tell the user about the temporary directory used by sdist.
Use 'sdist --list-sources' for the timestamp check.
Add a lower bound on the test-framework-quickcheck2 dependency.

See batterseapower/test-framework#36.