Fixes and upgrades to 'hit build-postprocess'

- Let the check for absolute paths to ignore *.pyc and *.pyo (for now)

- Rewrite absolute symlinks pointing inside artifact, and prohibit
  absolute symlinks pointing outside it