No error when version specifier doesn't match requirement source

[ibraheemdev]

Similar to https://github.com/astral-sh/uv/issues/4603, we should verify the version of a source matches the specifier. For example,

dependencies = [
    "uv-public-pypackage==0.0.2",
]

[tool.uv.sources]
uv-public-pypackage = { git = "https://github.com/astral-test/uv-public-pypackage", tag = "0.0.1" }

[ibraheemdev]

Alternatively we shouldn't allow version specifiers there at all.

[charliermarsh]

I added test coverage to at least codify the existing behavior in https://github.com/astral-sh/uv/pull/6051.

[charliermarsh]

I think I'll close this as "intentional".