Drop unique key on packages (and fix the one on dependencies)

This also speeds up a bit update and allowing multiple package with the
same name