pkg: rework pkg_verify_dependency() to treat dependencies as bytecode