locker: do not assign unrelated filenames/hashes to direct origin dependencies when used in multiple constraints dependencies
