all package sources: provide an `entity_uri` property in package descriptor

[toeb]

package handles should have
package_uri | uri which identifies a unique package instance
query_uri which contains the query that returned the specified package instance
entity_uri which contains the uri which uniquely identifies all package versions