make package installs strictly versioned

review times we install packages (excluding pacstrap for now) and install them with the version specified.
need to figure out how long a package version stays in the public Arch repos