Rewrite PackageState.versions to not depend on the order of the keys for analysis

[isoos]

Options:

• do sort/prioritization before submitting the payload to a worker
• keep track of the list of versions in their priority order as a List

[isoos]

We've decided that sorting will be enough for now: #7832.