Adds a `just rebuild <os> <tag> <arch> <package> <version>...` recipe that
dispatches a single-package (re)build to a remote buildx builder (artemis=amd64,
gaia=arm64). build-one.R auto-classifies each version (per-minor slot for risky,
generic otherwise), force-rebuilds + uploads, and refreshes the touched index.
