Package promise allows installation of package file with conflicting version

Given the following promise:

<pre>
packages:
"/tmp/my-package-2.0.deb
policy => "present",
version => "1.0";
</pre>

CFEngine will allow installing the package despite that its version doesn't match what was specified in the promise. It should refuse to do so.

See https://dev.cfengine.com/issues/7328#note-8 for the original discussion and logs.