Check for duplicate product codes from different package IDs

[denelon]

I believe there should be some kind of PR verification in the winget-pkgs repository to ensure that a package whose Product Code is already used by some other existing package cannot be introduced.

Tagging @denelon for visibility.

Originally posted by @felipecrs in #267669

[mdanish-kh]

For MSI installers, the ProductCode is typically unique for every version, but not necessarily in case of Inno, Nullsoft / EXE. There are valid cases where different package IDs will have duplicated product codes (mostly related to different channels of same product).

Some examples of different PackageIds that use the same ProductCode:

• PixPin.PixPin & PixPin.PixPin.Beta
• Cypherix.Cryptainer.Personal, Cypherix.Cryptainer.Lite, Cypherix.Cryptainer.Pro
• Bilibili.Bcut & Bilibili.Bcut.beta

and I'm sure many more...

[felipecrs]

For this specific known case, the automation could automatically exempt the Product Code duplicity in case the manifest owner is the same (everything before the first dot) i.e. PixPin (from PixPin.PixPin) == PixPin (from PixPin.PixPin.Beta). Or maybe even compare everything before the second dot, i.e. PixPin.PixPin == PixPin.PixPin (from PixPin.PixPin.Beta).