Add some debug to track down scorecard mismatch

[knolleary]

We still see the scorecards being generated against the wrong package version.

This PR adds some debug to try to track it down as I haven't been able to reproduce it locally.