Determine installed composer versions

Problem/Motivation

Some packages include a constant somewhere that indicates which version is installed, but some don't (or older versions didn't). To keep consistency in the UI and to avoid DX confusion, there needs to be a reliable way to determine which version of which package is installed.

Proposed resolution

Use some reverse engineering on the autoloader to determine the location of a package's composer.json file and potentially the vendor/composer/installed.json file. Fallback to matching hashes of known/expected packages associated with this project.