random(4): De-export random_sources list

The internal datastructures do not need to be visible outside of
random_harvestq, and this helps ensure they are not misused.

No functional change.

(cherry picked from commit b6db1cc7100350790201bfa550ec47d9a5fbe781)