Verified address has mismatched metadata or source

See `0x000000000022D473030F116dDEE9F6B43aC78BA3` on chain 1.

The metadata.json has at least one source (`src/AllowanceTransfer.sol`) whose hash in the metadata differs from the source returned by the `sources` field response.

```diff
diff --git a/./AllowanceTransfer.sol b/tmp/set2.sol
index ddf3781..84edcde 100644
--- a/./AllowanceTransfer.sol
+++ b/tmp/set2.sol
@@ -1,8 +1,8 @@
// SPDX-License-Identifier: MIT
pragma solidity 0.8.17;

-import {ERC20} from "solmate/src/tokens/ERC20.sol";
-import {SafeTransferLib} from "solmate/src/utils/SafeTransferLib.sol";
+import {ERC20} from "solmate/tokens/ERC20.sol";
+import {SafeTransferLib} from "solmate/utils/SafeTransferLib.sol";
import {PermitHash} from "./libraries/PermitHash.sol";
import {SignatureVerification} from "./libraries/SignatureVerification.sol";
import {EIP712} from "./EIP712.sol";
```

(the "plus" is the file whose hash is in the metadata object, which I retrieved via IPFS, and the "minus" is what Sourcify returns in the sources field)