Add test coverage for direct URLs with sources (#6046)
## Summary
Ensures that we don't respect `tool.uv.sources` for (eg.) direct URL
requirements, as intended.
Related to https://github.com/astral-sh/uv/issues/3943.
Closes https://github.com/astral-sh/uv/issues/6048.
