Require package names to be lowercase.

[peterhuene]

Upstream change to the proposal: WebAssembly/component-model#338

We should be validating this in Package::from_file and Package::from_bytes too.