Add original hash of dependencies to package

[MordragT]

This means that we also have to check in the depdency resolver if multiple versions are available to use the original hash.
If the original hash cannot be used, put the calculated option in and add an Step::VersionMismatch(calculated package).