feat: minimal updates when relocking, and other strategies

[maresb]

What is the idea?

The idea of supporting multiple update strategies has been raised in #196 (comment).

Why is this needed?

There are typically many ways of satisfying dependencies. Sometimes the goal is to have as few updates as possible. In certain situations it may be useful (e.g. testing) to install the oldest possible dependencies instead of the newest.