Restore resolves to a different version than defined in packages.lock.json file

[jainaashish]

Steps to repro:

1. Create a new project and enable lock file feature
2. Create a local feed with package package version 1.0.0
3. Add a packageRef of packageA with version 1.0.*. This will resolve to version 1.0.1 and add that in to lock file.
4. Create another version 1.0.1 of packageA in local feed and delete 1.0.0.
5. Clean project assets file and global packages folder.
6. Restore

This will resolve to packageA and version 1.0.0 which is different than what is defined in lock file.

Another scenario, is when project requested package version 1.0.* and lock file has 1.0.1 but the global packages folder has 1.0.2 version. Then also, it will resolve to 1.0.2.

[jainaashish]

Merged to release-4.9.3 branch with commit 70f87565429e2dd987843bd51b0cac169bee135c