ncm-spma: check the locked packages with wildcards

Have you measured how slow it is? `repoquery` can be awfully slow, but text matching shouldn't be too bad.