GNUmakefile: make sure all is built before installing

prevents possible foot-shootings from running 'all' or 'check'
as root; the root-owned files in the working copy are the least
of problems that could lead to.  the install target depends on
a sentry file which is touched when 'all' succeeds.