fix: allow app spm to "override" plugin spm packages

fix: allow app spm to "override" plugin spm packages #186