Use more efficient ComposedSet#find_all

This version will create fewer garbage objects
A Specification's source is a Source::Installed

A Specification and Source are not otherwise ordered, so we need to use
the source we created exactly for this case.
Add empty Source::Git#download

This allows RequestSet to ignore downloading the nonexistent .gem file