inflight by URL rather than package spec; improve logging

This is a work in progress to map in-flight deferral to actual network requests, by using as the inflight key the actual registry URL being called. Also includes some better logging, and a version of inflight upgraded to pass all of a callback's parameters to the proxied calls.