Make the XIP and XAR builds reproducible

At the moment, the XAR and XIP builds don't consider project.build.outputTimestamp and don't ensure that the order of the files in the ZIP is deterministic. This prevents XAR and XIP builds from being reproducible.