fix: apply bundle only resolution to every pkg key

[JamesPatrickGill]

Previously logic around parent permutations when scoping pkg keys in the package-lock file was restriced to packages that where bundled only. This was an incorrect assumption and this extends this logic to every pkg albeit using the project root as the base parent opposed to the bundle root.