locker: move export logic into locker for reuse

This change, moves common functionality from exporter into the locker
to allow for sharing of logic that can generate `DependencyPackage`
instances given a a list of requirements using the lock data.

(cherry picked from commit c2adb328)