make it possible to specify exact subpackage versions easily

[shadeofblue]

currently, goth uses use-prerelease flag to determine whether to use released versions of prereleases to build the nodes

we should be able to pin exact versions

possibly connected to: #602