tar.gz targets look in DEPS_DIR instead of deps

When projects set a different DEPS_DIR than leptus,
the tar.gz will be curl-ed to that instead.
This change prevents pulling down the tar.gz every time.