raco setup: fix dependency checker to distinguish package name from source

Closes PR 14095
document pkg/name

Also, tighten contracts and add `package-source-format?`.
fix doc package deps