New review comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/pull/28510#discussion_r571138552

Comment:
@Gottox And for the record, I do agree with you on one point here: if we use a commit hash, we can way more easily track down the original tarball, if it isn't available from distfile caches. With just the tag, it's very hard to find the original ref.