Reject lockfiles with incoherent versions
Reject lockfiles where the package version and the wheel versions are incoherent. This implicitly checks that all wheel files have the same version.
It does not check for the source dist version, since a source dist may not contain a version in the filename and attempting to deserialize source dist filenames we may not need is a performance overhead for something that's already slow in `uv run`.
Fixes #12164
