E.g., if you have a `tool.uv.sources` that points to a local pre-built source distribution, it looks like we omit the hash.