Fix the mtime build-freshness false-fail (dsl/tools/build_step.dag): derive freshness from cargo's up-to-date authority, not mtime-vs-source (sccache cache-hit -> stale-mtime false red) - #5580