make: evaluate the Git SHA only once
make: ensure order of `$(AR)` calls