Fix issues resolving packages

[citizenmatt]

This PR will fix a couple of edge cases while resolving packages and the packages-lock.json file is disabled:

• Fix an issue displaying a package dependency that has been resolved when the package dependency resolution strategy is set to highestPatch, highestMinor or highest. In this case, Unity can resolve a dependency to a higher version than requested in a requiring package's package.json. Rider doesn't have this information, so resolves the dependency against the contents of Library/PackageCache.
• Fix an issue displaying a Git based package when the lock file is disabled. There is no hash to use to look up the package in the local package cache. Instead, we look for the package ID as a prefix in the local package cache.
• Add extra checks for packages that take precedence over resolved dependencies. Previously, the code only considered embedded packages as taking precedence. As per the docs, any embedded, local, git or built in packages take precedence over a requested version in a dependency.

[van800]

LGTM!