Don't include sources in sources.list, they're not needed for building

It's also not guaranteed that there even is a source repository.
The given $REPOS variable may also point to a suite, not only a codename

Reprepro accepts suite names as aliases for codenames so we should do so too.
Dynamically parse list of components from Release file

There's no need to hardcode "main".