Orca should recognize upstream origin for apk package managers

The following is an example of the `keyutils` package. The name is `keyutils-libs` but the final binary is `keyutils`

```sh
P:keyutils-libs
U:https://people.redhat.com/~dhowells/keyutils/
o:keyutils
p:so:libkeyutils.so.1=1.10
R:libkeyutils.so.1
R:libkeyutils.so.1.10
D:krb5-conf so:libc.musl-x86_64.so.1 so:libcom_err.so.2 so:libcrypto.so.3 so:libkeyutils.so.1 so:libssl.so.3 so:libverto.so.1
```