upgrade ghc-pkg oracle to output of 'dump' instead of 'list'

This way we notice even when a package ABI hash changes but the
version stays the same (as might happen, e.g., when making
modifications to a dependency like the 'docutils' package).