fix(nm): Disallow overwriting workspace dependencies with portal dependencies

[larixer]

What's the problem this PR addresses?

This is a follow-up PR to #3438. There might be a problem when both workspace and portal are pointing to the same location. In this case, the ambiguity for the nm linker occurs, which one to use. It should give priority to a workspace because devDependencies will not be installed for portal:

How did you fix it?

When two locators point to the same soft location, I give priority to the workspace locator.

The problem was discovered by: @missing1984

Checklist

• I have read the Contributing Guide.

• I have set the packages that need to be released for my changes to be effective.

• I will check that all automated PR checks pass before the PR gets reviewed.