valide package_ensure less strict

we only allowed present/absent/latest on the first attempt. But people
can also pass their own version strings so we've to accept any not empty
string.