Use realize package specifier

The goal here is to clean up the special cases around local package handling and put it all in a module so I can use it outside of cache (for multi-stage install)
Ah-hah! It forces npa to think that we're on win32 and thus support windows slashes.

https://github.com/npm/npm-package-arg/blob/master/npa.js#L9