pkg: forward "provided_by_hand" flag in pkg_merge()