Work around limitations in enforcer rules

In the 'deps' profile, we add the -sources attachment to the dependencies;
Both the "circular dependencies" and the "release dependencies" rules have
problems with that. Let's work around.

Thanks, Jesusa Jenkins!

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>