Don't use current user, hostname and build time

but parse debian/changelog instead to work towards reproducibility.

Thanks: Ben Hutchings for pointing this out