fix(new_engine): Improve partial upgrade protection and pinned deps (#1945)

* fix dep graph, existing in graph

* do not change from same dep reason

* roll up layer installs in case of fail

* re-use pacman exclude mechanism

should finish the reimplementation of the missing guards from the legacy
engine.

* include update in debug log

* test rollups

local_install.go

@@ -101,5 +101,5 @@ func installLocalPKGBUILD(
 	if err := multiErr.Return(); err != nil {
 		return err
 	}
-	return opService.Run(ctx, cmdArgs, targets)
+	return opService.Run(ctx, cmdArgs, targets, []string{})
 }