package.loader: Deduplicate target SWHIDs

So package loaders can actually finish their ingestion even when multiple releases target the same directory.

Related to #3763 (closed)

Test Plan

tox (should still be happy)

---

Migrated from D6739 (view on Phabricator)