`tap package download`/`install` should use the version specified and return error if not found

Today you might get e.g. 1.4.0 installed if you specified --version 1.5 but no 1.5 exists.