OSSEC debs are ocassionally not reproducible in CI

## Description

We've seen a few CI failures where the reproducible debs job fails on ossec-agent.

E.g. https://github.com/freedomofpress/securedrop/actions/runs/14985066932/job/42097649556?pr=7278

We also need to install `binutils` to get useful diffs via readelf instead of binary gibberish.