No more false-positive duplicate xcframework warnings

The duplicate-xcframework warning is no longer raised when the same binary SwiftPM target is reached through multiple external SwiftPM products. The mapper now collapses byte-identical .xcframework dependencies produced by .external expansion to one graph dependency. Hand-authored manifest duplicates of the same .xcframework still trigger the duplicate-dependency warning, so genuine manifest mistakes remain visible.