[webui][profile] Support bundle checklist should include "source code" explicitly

The bundle API/UI looks like this:

There is no mention of the source code.
The source code can be present either in the pipeline config or in the dataflow graph.
The user should have the option to exclude the source code explicitly from either of these locations.
I am marking this as a bug, since it is a security problem for users.

[I also think we should permanently remove the source code from the pipeline config, at least as included in the bundle]