installer: respect source if the same version of a package has been locked...

installer: respect source if the same version of a package has been locked from different sources (#8304)

Co-authored-by: David Hotham <david.hotham@blueyonder.co.uk>