Use (more) stable URL to fetch Tor Browser 4.0 tarballs.
Fetch Linux 3.16-3 packages from testing (Closes: #8248).

As expected, it was removed from sid. The longer-term fix is tracked by #8249.