4354c0c9b7
## Summary This is a smaller alternative to #10794. If the `Requires-Dist` that we extract statically doesn't match the lockfile metadata, we now go back to the distribution database to double-check. Checking the `Requires-Dist` is itself very cheap, so in the worst case, we're just paying the same cost as prior to this optimization. Closes https://github.com/astral-sh/uv/issues/10776.