provider: fix vcs source/resolved ref propagation

This change ensures that when complete packages are created dependency
inherits source and resolved refs from package.