Local repository should be more strict with asked dependency id

Right now when asking an extension dependency to the local repository it return the first compatible extension which covers the passed dependency feature.

It might be a nice optimization in some cases but is actually dangerous in others. Better make local repository react as most remote repositories which is to remain strict regarding extension id and recommended version.