Root package issue when scanning uv repository

Nobody has claimed this yet.

When scanning my "uv-demo-project" with uv.lock file as following, the root package "uv-demo-project" is reported as a package. It should have been excluded.
```
version = 1
requires-python = ">=3.8"

[[package]]
name = "pluggy"
version = "1.5.0"
source = { registry = "https://pypi.org/simple" }
sdist = { url = "https://files.pythonhosted.org/packages/96/2d/02d4312c973c6050a18b314a5ad0b3210edb65a906f868e31c111dede4a6/pluggy-1.5.0.tar.gz", hash = "sha256:2cffa88e94fdc978c4c574f15f9e59b7f4201d439195c3715ca9e2486f1d0cf1", size = 67955 }
wheels = [
{ url = "https://files.pythonhosted.org/packages/88/5f/e351af9a41f866ac3f1fac4ca0613908d9a41741cfcf2228f4ad853b697d/pluggy-1.5.0-py3-none-any.whl", hash = "sha256:44e1ad92c8ca002de6377e165f3e0f1be63266ab4d554740532335b9d75ea669", size = 20556 },
]

[[package]]
name = "pytest"
version = "8.3.4"
source = { registry = "https://pypi.org/simple" }
dependencies = [
{ name = "colorama", marker = "sys_platform == 'win32'" },
{ name = "exceptiongroup", marker = "python_full_version < '3.11'" },
{ name = "iniconfig" },
{ name = "packaging" },
{ name = "pluggy" },
{ name = "tomli", marker = "python_full_version < '3.11'" },
]
sdist = { url = "https://files.pythonhosted.org/packages/05/35/30e0d83068951d90a01852cb1cef56e5d8a09d20c7f511634cc2f7e0372a/pytest-8.3.4.tar.gz", hash = "sha256:965370d062bce11e73868e0335abac31b4d3de0e82f4007408d242b4f8610761", size = 1445919 }
wheels = [
{ url = "https://files.pythonhosted.org/packages/11/92/76a1c94d3afee238333bc0a42b82935dd8f9cf8ce9e336ff87ee14d9e1cf/pytest-8.3.4-py3-none-any.whl", hash = "sha256:50e16d954148559c9a74109af1eaf0c945ba2d8f30f0a3d3335edde19788b6f6", size = 343083 },
]

[[package]]
name = "uv-demo-project"
version = "0.2"
source = { editable = "." }
dependencies = [
{ name = "cowsay" },
]

[package.dev-dependencies]
dev = [
{ name = "pytest" },
]

[package.metadata]
requires-dist = [{ name = "cowsay" }]

[package.metadata.requires-dev]
dev = [{ name = "pytest", specifier = ">=8.3.4" }]
```

Start by reproducing the scan with the supplied uv.lock content and trace the uv lockfile handling that turns package entries into detected components. Check how editable packages with source = { editable = "." } are treated. Done means the root package uv-demo-project is excluded while its external dependencies remain detected.

Written by the indexing model from the issue text.