* pin path_provider_android

* remove constraint that only explicit dependencies can be pinned

* roll packages