ExternalProject: declare byproducts for the download step

This can surface a conflict where two projects download the same file
and get scheduled against each other.
2 files changed