always build local release for vagrant-bosh

already cloned the repo; makes more sense to provision what's there

later a manifest should be consumable without the release, and *that*
manifest should specify locked-down versions

ultimately packer built boxes will replace all of this anyway