Here's an update for the record. I've had upstream stop shipping an obsolete debian/ directory in the tarballs they release. I've had upstream fix their build system so that the "install" make target works properly when installing into the debian/$(PACKAGE) destination directory. Copyright/license are being clarified and sorted out with upstream as well. Stay tuned.