packaging metadata files don't seem to match hackage versions

[bmillwood]

The cabal file on Hackage has version 0.2.4.4 and has constraints on all the dependencies, but even in the 0.2.4.4 tag, the package.yaml says 0.2.4.1 and has no bounds on the dependencies.

I noticed this because I wanted to request the containers lower bound be dropped to support my package-manager-provided version (0.6.7) but there's nowhere in the repo to suggest such a change. It also made compiling the package locally myself (and vendoring it as a dependency of another project) confusing.