Speed up builds.

Only build / validate rulesets when they have changed.

Also break out validation steps into their own script, shared by
makecrx/makexpi.