Ref T2543. After D18731, Herald build rules run more often, but now incorrectly try to run builds when Diffusion closes a revision because a commit landed.

Made some mundane updates locally; this is tricky to test comprehensively locally so I'm mostly planning to just push it to secure.