Review how non-named requirements are locked into candidates

[uranusjr]

pypa/pipenv#2826. I think Passa currently also locks editable VCS to a specific ref.

Really though, non-local editable is just very confusing to me, to the point I suspect the whole design is just bad.

[techalchemy]

Hmm good point. I’m guessing the editable element is supposed to mean that it doesn’t need a specific hash... lets follow up on this one