move resource dependency resolution into builder

this guarantees that any build triggered never triggers against the wrong
inputs; the job's dependencies are always taken into account. previously the
winstonchecker would trigger a build and only override a particular resource,
when in reality the job could have had other inputs that had dependencies, and
those would not have been respected.

this logic is now also removed from the trigger build handler, making it much
thinner.