Bring dkms rebuild out into its own task, as it doesn't run reliably during the install step; save its output; change deps around; sort package ensure for kernel headers